Job Title

Credential Protection Solution Design AI Engineer

Function

Information Security

Scope (indicate either global/cross-border or local/country)

Global/cross-border

Sub Function

Identity and Access Management

Job Summary

The Information Security Engineer will be responsible for the design, implementation, operation, and security of technologies related to the protection of privileged credentials. The ideal candidate will have prior experience in developing and operating CyberArks Privileged Account Security Solution. The Engineer will be responsible for participating in projects to extend the capabilities of the CyberArk service along with the continued operation and maturation of the service. The engineer will also create and enhance documentation related to configuration, standard operating procedures, workflow diagrams, and service intake forms. We are seeking an experienced AI Solutions Engineer to design and develop intelligent agents that automate and enhance CyberArk Solution Design, onboarding, compliance validation, documentation, and operational processes. The role will focus on leveraging Generative AI, Agentic Frameworks, and enterprise automation technologies to improve efficiency, consistency, and scalability across privileged access management services.

We seek someone who is proactive and takes ownership of the service. The candidate is expected to review various sources for best practices, security information, and threat vectors in order to determine the potential impact to the environment and recommend configurations and solutions accordingly. Risk assessment techniques, scripting, linux and Windows administration, and cloud technology experience are desired

Acts as the technical owner for solution design activities, driving requirements analysis, architecture decisions, implementation planning, and continuous service improvement.

Essential Functions of the Job

- Develop and manage CyberArks Privileged Account Security Solution including the following:
- Configure and operate CyberArk Enterprise Password Vault component and Safe design
- Configure and operate CPM and PVWA components
- Configure and operate High Availability and DR components




- Configure and operate PSM, AAM, and CCP products
- Lead solution and design reviews for privileged access onboarding initiatives.
- Develop repeatable solution patterns and reference architectures for credential protection capabilities.
- Create standards for credential protection integrations.
- Partner with application teams to assess requirements and define privileged access onboarding strategies.
- Provide technical leadership and guidance on PAM design decisions.
- Design and develop AI agents for solution assessment, pattern recommendation, design document generation, compliance validation, and knowledge management.
- Design, build, test, and maintain AI agents using enterprise-approved frameworks.
- Develop Retrieval Augmented Generation (RAG) solutions leveraging PAM documentation and knowledge repositories.
- Build workflow automation integrating ServiceNow, CyberArk, Active Directory, and cloud platforms.
- Develop prompt engineering standards and AI governance controls.
- Measure and report AI solution effectiveness through KPIs and adoption metrics.
- Facilitate design workshops with stakeholders, translate business requirements into technical solution designs, present recommendations to senior leadership, and drive alignment across security, application, infrastructure, and operations teams.
- Configure and operate Multi-factor authentication
- Configure and operate LDAP, RADIUS, and SAML integration
- Integrating various target platforms such as operating system, network device, service accounts, etc.
- Document, report, and present on CyberArk design, performance metrics, security and operational log activity
- Develop working knowledge for extended global team on all matters related to CyberArk technology
- Follow ITIL process for incident and change management




- Excellent English language skills, both written and verbal
- Excellent interpersonal, communication, consultative and project management skills
- Must be self-motivated and able to work independently, often unsupervised

Analytical/Decision Making Responsibilities
- Ability to recognize and research attacks and attack patterns
- Ability to work effectively with clients, management staff members, vendors and consultants
- Demonstrated creative problem-solving skills including defining and resolving issues.
- Identify and escalate project risks to management.
- Superior skill in organizing, managing and interpreting data and reports.
- Ability to interface with cross-functional technology teams
- Project planning and project leadership skills
- Communicates proactively and often with counselees and team members to drive open and honest development and career conversations for the purpose of building trust, authentic meaningful relationships and exceptional career experiences.

Knowledge and Skills Requirements
- Experience with CyberArk Privileged Account Security Solution
- Experience with server operating system technologies
- Strong network and/or system administration background
- Packet capture analysis
- Strong knowledge of Active Directory
- Robust knowledge of cloud technologies
- Experience producing solution designs, high-level designs (HLDs), and low-level designs (LLDs).
- Experience performing threat modeling and security architecture reviews.
- Cloud architecture experience, preferably with Microsoft Azure.
- Experience with integration architecture and API design.
- Experience mapping security controls to NIST, ISO 27001, CIS, and related frameworks.
- Experience with Generative AI, LLMs, Agentic Frameworks.
- Familiarity with Microsoft Copilot, Azure AI.
- Experience with Microsoft Copilot Studio.
- Experience with scripting languages, especially PowerShell
- Strong knowledge of information security concepts and technologies
- Understanding of cryptography standards
- Knowledgeable in all ISO and/or ISC2 defined domains of security
- Strong research skills

📌 Security Engineer (Bengaluru)
🏢 EY
📍 Bengaluru