Job Description: CyberArk, PAM Engineer

Location: Hyderabad

Required Qualifications

- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field, or equivalent relevant experience.
- At least 7 years of experience in cybersecurity, IAM, or infrastructure security, including substantial hands-on experience supporting enterprise PAM solutions.
- Demonstrated hands-on experience with CyberArk PAM implementation, administration, integration, troubleshooting, and production support.
- Experience working in enterprise environments with formal incident, request, problem, change, release, and access-governance processes.

Must-Have Technical Skills

- Hands-on expertise with CyberArk EPV, Digital Vault, PVWA, CPM, PSM, PSMP, and EPM.
- CyberArk privileged account onboarding, Secure and platform configuration, access controls, password rotation, reconciliation, verification, account dependencies, and service-account management.
- CyberArk PSM connection components, session isolation, recording, monitoring, command control, connector troubleshooting, and privileged-session issue resolution.
- CyberArk EPM policy creation and tuning, endpoint least privilege, removal of local administrator rights, application control, privilege elevation, agent administration, and event analysis.
- Strong knowledge of Active Directory, LDAP, Windows Server, Unix/Linux, networking fundamentals, databases, service accounts, and authentication protocols.
- Knowledge of IAM/PAM concepts, including privileged identity lifecycle, RBAC,



least privilege, separation of duties, access certification, MFA, SSO, and Zero Trust principles.
- Experience integrating CyberArk with SAML/MFA, SIEM, ITSM, directory services, monitoring tools, and enterprise applications.
- Scripting and automation experience using PowerShell, Python, Bash, and/or REST APIs.
- Strong troubleshooting, root-cause analysis, documentation, stakeholder communication, and production-support skills.

Operations, Troubleshooting, and Security Assurance

- Provide L2/L3 support for CyberArk incidents, service requests, problems, and changes; troubleshoot Vault, PVWA, CPM, PSM, PSMP, EPM, connector, credential rotation, reconciliation, and session-launch issues.
- Monitor CyberArk component availability, logs, alerts, audit trails, service health, capacity, and integration dependencies; identify root causes and implement corrective and preventive actions.
- Investigate privileged-access security events and support incident response, evidence collection, access containment, and remediation activities.
- Conduct periodic reviews of privileged accounts, Safes, memberships, entitlements, policies, inactive accounts, exceptions, and session activity.
- Maintain operational documentation, architecture diagrams, build guides, standard operating procedures, recovery procedures, knowledge articles, and support playbooks.
- Produce audit and compliance evidence aligned with organizational policies and applicable control frameworks such as NIST, ISO 27001, PCI DSS, and SOX.

📌 CyberArk Engineer - PAM (Hyderabad)
🏢 MassMutual India
📍 Hyderabad