Job Summary

Role: PAM Engineer / PAM Specialist
Experience: 5–8+ years
Domain: Cyber Security – Identity & Access Management

Role Objective

Responsible for implementation, administration and operational support of enterprise Privileged Access Management (PAM) solutions, ensuring privileged accounts are securely onboarded, governed, monitored and controlled.

Key Responsibilities

Key Responsibilities

- Implement, administer and support CyberArk PAM solutions.
- Manage Vault, PVWA, CPM, PSM, CCP/AIM and PSMP components.
- Discover and onboard privileged accounts including Windows Domain Admin, Linux/Unix root, database, service and application accounts.
- Onboard applications to Central Credential Provider (CCP) and eliminate hard-coded/service credentials where applicable.
- Configure automated password rotation, verification and reconciliation.
- Manage safes, platforms, policies, access permissions and privileged-account lifecycle.
- Configure and troubleshoot PSM privileged session monitoring/recording.
- Integrate PAM with Active Directory/LDAP and enterprise applications.
- Support privileged access across Windows, Linux/Unix, databases, network devices and cloud environments.
- Troubleshoot CPM/PSM/CCP connectivity, password rotation and account reconciliation issues.
- Support PAM upgrades, migrations, vulnerability remediation and platform health activities.
- Work with Cyber Security, Infrastructure, Application and IAM teams for account onboarding and access remediation.
- Handle incidents, service requests, changes and problem management through ServiceNow.




- Develop automation using PowerShell/Python/REST APIs for bulk onboarding and administration.
- Maintain PAM documentation, SOPs, runbooks and audit evidence.
- Ensure compliance with least privilege, RBAC, credential management and privileged-access governance requirements.

These areas also align with internal PAM experience identified around CyberArk CPM/PVWA/PSM/AIM/Conjur, BeyondTrust, AD/LDAP, RBAC, incident management and automation.

Skill Requirements

Mandatory Technical Skills

- CyberArk PAM
- CyberArk Vault, PVWA, CPM, PSM, CCP/AIM, PSMP
- Privileged and service-account onboarding
- Password rotation and reconciliation
- Active Directory / LDAP
- Windows & Linux/Unix administration fundamentals
- REST API / PowerShell / Python scripting
- ITSM / ServiceNow processes
- Strong troubleshooting and RCA capabilities

Must Have Skill

CyberArk PAM

Good to Have Skill

Other Requirements

Valuable to Have

- BeyondTrust / CA PAM
- CyberArk certification
- Azure/AWS privileged-access knowledge
- Ansible and CI/CD automation
- SSO, MFA and IAM integration experience
- Database and network-device PAM onboarding

Key Deliverables

Privileged Account Discovery Account Onboarding Password Vaulting & Rotation Session Management Application/CCP Integration Access Governance Audit & Compliance

For the current PAM scope, the most important emphasis should be CPC onboarding, CCP application onboarding, privileged-account discovery/clean-up, and standardisation of the privileged-account lifecycle

📌 Track Lead (Support & Operations) (India)
🏢 HCLTech
📍 India