Privileged Access Management (PAM) - CyberArk Core PAS (Self-hosted) and/or Privileged Cloud

7-9 years of Privileged Access Management (PAM) experience with strong hands-on CyberArk implementation and engineering expertise.

Proven experience with CyberArk Core PAS (Self-Hosted) and/or Privilege Cloud, including EPV, PVWA, CPM, PSM, PTA, CCP, and Credential Providers.

Extensive experience onboarding privileged, service, application, database, cloud, and infrastructure accounts into CyberArk.

Strong experience in application onboarding, account discovery, Safe design, credential dependency analysis, password rotation, reconciliation, and session management.

Expertise in developing, customizing, and troubleshooting CPM plugins, reconciliation processes, and custom CyberArk platforms for non-standard applications.

Hands-on experience designing and supporting custom PSM connectors and session management integrations.

Strong scripting and automation experience using CyberArk REST APIs, PowerShell, Python, and Shell scripting.

Proven experience integrating CyberArk with AD/LDAP, Entra ID (Azure AD), MFA, SIEM, ITSM, IGA, SMTP, and cloud platforms.

Advanced troubleshooting skills across Vault, CPM, PSM, PTA, CCP, and CyberArk integrations, including log analysis and root cause analysis.





Experience with CyberArk installation, upgrades, migrations, patching, performance tuning, high availability, disaster recovery, and platform hardening.

Experience implementing CyberArk Application Access Manager (AAM) and enterprise secrets management solutions.

Robust knowledge of service account governance, automated credential rotation, reconciliation, and privileged access controls.

Experience integrating CyberArk with DevOps and CI/CD platforms such as Jenkins, GitLab, GitHub Actions, Terraform, Ansible, and Azure DevOps.

Experience implementing Just-In-Time (JIT) access, privileged session monitoring, and advanced PAM security controls.

Good to Have Skills/Project Experience/Certifications:

- PAM technology certifications (Defender, Sentry, CDE PAM, CDE CPC, CDE EPM)
- CISSP, PMP and exposure to other security domains

Shift Timings:

- You may be required to work rotational shifts, including 9:00 pm to 6:00 am IST, to support client deliverables.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Sr CYBERARK PAM - Professional (Chennai)
🏢 Kastech
📍 Chennai