Job Description – CyberArk PAM Engineer / Architect – L3+Position Summary

The CyberArk PAM Engineer / Architect is responsible for the design, implementation, operation, and governance of the CyberArk Privileged Access Management platform. The role provides L3+ engineering support and architectural leadership for securing privileged accounts, service accounts, application credentials, and privileged sessions across on-premises, cloud, and hybrid environments.

Key ResponsibilitiesCyberArk Platform Management

- Design, deploy, and maintain CyberArk PAM solutions.
- Manage CyberArk components including:
- Digital Vault
- PVWA
- CPM
- PSM
- PSM for SSH
- PTA
- AAM / Conjur
- Perform upgrades, migrations, and platform optimization.
- Ensure platform availability and resiliency.

Privileged Account Governance
- Onboard privileged accounts and systems.
- Define password rotation policies.
- Implement least privilege controls.
- Manage privileged account lifecycle processes.
- Conduct access reviews and compliance reporting.

Service Account & Application Credential Management
- Discover and onboard service accounts.
- Implement credential rotation and reconciliation.
- Manage application secrets using:
- CyberArk AAM
- CyberArk Conjur
- Secure DevOps and CI/CD privileged credentials.

Session Management & Monitoring
- Configure privileged session monitoring and recording.
- Review session recordings during investigations.
- Define alerting and anomaly detection rules.
- Support incident response and forensic investigations.

Cloud & Hybrid PAM
- Integrate CyberArk with:
- Microsoft Entra ID
- Active Directory
- Azure
- AWS
- GCP
- Kubernetes




- Implement cloud privilege governance.
- Secure privileged access for SaaS platforms.

Architecture & Governance
- Define CyberArk standards and best practices.
- Develop PAM roadmaps and implementation strategies.
- Support audits and compliance initiatives.
- Create technical documentation and operational procedures.

Required Technical SkillsCyberArk Technologies
- CyberArk PAM
- Digital Vault
- CPM
- PVWA
- PSM
- PTA
- AAM
- Conjur
- EPM

Infrastructure Technologies
- Active Directory
- LDAP
- Windows Server
- Linux
- VMware
- IIS
- SQL Server

Scripting & Automation
- PowerShell
- REST APIs
- Python
- CyberArk REST API

Security & Governance
- PAM Architecture
- Zero Trust
- Privileged Session Management
- Credential Management
- Secrets Management

Experience Requirements
- 15+ years in Cybersecurity or IAM.
- 12+ years administering and engineering CyberArk PAM.
- Experience with large-scale CyberArk deployments.
- Experience with service account governance and secrets management.
- Experience supporting enterprise environments with strict compliance requirements.

Preferred Certifications
- CyberArk Defender PAM
- CyberArk Sentry PAM
- CyberArk Guardian
- CISSP
- CISM
- Microsoft SC-300
- Microsoft SC-100

Expected Seniority (L3+)

For both roles, the resource should be capable of:

- Leading technical design workshops.
- Acting as an escalation point for L1/L2 teams.
- Creating architecture standards and governance frameworks.
- Driving remediation of security findings.
- Leading IAM/PAM projects independently.
- Mentoring junior engineers and operations teams.
- Engaging with auditors, security architects, and senior stakeholders.

-

📌 CyberArk PAM Engineer / Architect –+ (India)
🏢 Atidan Technologies
📍 India