PAM Engineer

Role Summary

We are seeking a hands-on Privileged Access Management (PAM) Engineer to support a large-scale CyberArk enhancement and adoption program. The role will design, configure, integrate, test, troubleshoot, and transition PAM capabilities across cloud, Active Directory, endpoint, database, Windows Server, and secrets-management use cases.

The Engineer will work closely with PAM architects, platform owners, security teams, application teams, and operations to translate approved designs into production-ready configurations, onboard privileged identities and target systems, resolve technical issues, support testing and hypercare, and produce the documentation required for operational handoff.

Key Responsibilities

• Participate in discovery and solution-design activities, validate technical requirements and dependencies, and translate approved designs into implementable CyberArk configurations.
• Configure and maintain CyberArk PAM components and policies applicable to the program, including CyberArk IDIRA Privilege Cloud, Privileged Session Manager (PSM), Central Policy Manager (CPM), Secrets Hub, and Endpoint Privilege Manager (EPM).
• Onboard privileged accounts and target systems across Microsoft Active Directory, Windows Server, Microsoft SQL Server, cloud administrative environments, and other in-scope platforms.
• Configure password-management, reconciliation, rotation, credential-management, and privileged-session policies in line with approved requirements and operational standards.
• Configure connectors, platform policies, safes/vault structures, access controls, and related onboarding components for applicable target systems.
• Support integrations with Amazon Web Services (AWS), Microsoft Azure, Microsoft Entra ID, Oracle Cloud Infrastructure (OCI), AWS Secrets Manager, Azure Key Vault, ServiceNow, and other in-scope supporting systems as defined by the program.
• Troubleshoot complex onboarding, password-management, session-management, connector, proxy-session, Remote Desktop Protocol (RDP), and target-platform issues through structured technical investigation.
• Support endpoint privilege use cases and policy implementation through CyberArk EPM for in-scope endpoint scenarios.
• Execute unit and system testing, support User Acceptance Testing (UAT), resolve defects, and provide technical evidence required for implementation approval.
• Support controlled production changes, implementation waves, post-deployment validation, and hypercare activities, including timely resolution of implementation defects and stabilization issues.
• Develop and maintain technical documentation, build/configuration records, integration notes, test evidence, runbooks, troubleshooting procedures, and knowledge-transfer materials for operations.
• Work closely with PAM support and operations teams to ensure solutions are supportable and that operational ownership, monitoring, escalation, and recovery procedures are understood before handoff.

Required Qualifications and Skills

• Minimum 5 years of hands-on CyberArk PAM experience, including implementation, configuration, onboarding, troubleshooting, and support of enterprise deployments.
• Strong hands-on experience with privileged account onboarding, password management, session management, policy configuration, connector/platform management, and troubleshooting.
• Strong understanding of Identity and Access Management (IAM) and PAM architecture, privileged identity lifecycle, authentication, authorization, and enterprise access-control patterns.
• Practical experience integrating CyberArk with enterprise target platforms such as Active Directory, Windows, Unix/Linux, databases, and cloud environments.
• Working knowledge of Windows and Linux operating systems, network and data-center concepts, remote administration, and common enterprise infrastructure dependencies.
• Ability to troubleshoot complex technical issues across CyberArk components, target systems, authentication flows, connectivity, and policy configuration.
• Strong technical documentation skills and experience producing implementation procedures, runbooks, test evidence, support documentation, and knowledge-transfer content.
• Strong written and verbal communication skills and the ability to work independently while coordinating effectively with architects, project teams, platform owners, and operations.
• Ability to work effectively during India night-shift hours aligned to the U.S. Eastern Time workday.

Preferred Qualifications

• Experience implementing or supporting CyberArk cloud offerings in large enterprise environments.
• Experience using CyberArk application programming interfaces (APIs), including Representational State Transfer (REST) APIs, to automate repeatable administration or onboarding activities.
• PAM architecture or solution-design experience and the ability to identify implementation trade-offs, prerequisites, and operational impacts.
• Understanding of business, audit, regulatory, and security-control drivers for privileged access.
• CyberArk PAM certification, including CyberArk Certified Delivery Engineer (CDE-PAM / CDE-CPC), or equivalent current CyberArk certification is an asset.
• Bachelor's or Master's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related discipline, or equivalent professional experience.