CyberArk Engineer - PAM

· Produce audit and compliance evidence aligned with organizational policies and applicable control frameworks such as NIST, ISO 27001, PCI DSS, and SOX.

Qualifications

• · Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field, or equivalent relevant experience.
• · At least 7 years of experience in cybersecurity, IAM, or infrastructure security, including substantial hands-on experience supporting enterprise PAM solutions.
• · Demonstrated hands-on experience with CyberArk PAM implementation, administration, integration, troubleshooting, and production support.
• · Experience working in enterprise environments with formal incident, request, problem, change, release, and access-governance processes.
• Must-Have Technical Skills
• · Hands-on expertise with CyberArk EPV, Digital Vault, PVWA, CPM, PSM, PSMP, and EPM.
• · CyberArk privileged account onboarding, Safe and platform configuration, access controls, password rotation, reconciliation, verification, account dependencies, and service-account management.
• · CyberArk PSM connection components, session isolation, recording, monitoring, command control, connector troubleshooting, and privileged-session issue resolution.
• · CyberArk EPM policy creation and tuning, endpoint least privilege, removal of local administrator rights, application control, privilege elevation, agent administration, and event analysis.
• · Strong knowledge of Active Directory, LDAP, Windows Server, Unix/Linux, networking fundamentals, databases, service accounts, and authentication protocols.
• · Knowledge of IAM/PAM concepts, including privileged identity lifecycle, RBAC, least privilege, separation of duties, access certification, MFA, SSO, and Zero Trust principles.
• · Experience integrating CyberArk with SAML/MFA, SIEM, ITSM, directory services, monitoring tools, and enterprise applications.
• · Scripting and automation experience using PowerShell, Python, Bash, and/or REST APIs.
• · Strong troubleshooting, root-cause analysis, documentation, stakeholder communication, and production-support skills.
• Operations, Troubleshooting, and Security Assurance
• · Provide L2/L3 support for CyberArk incidents, service requests, problems, and changes; troubleshoot Vault, PVWA, CPM, PSM, PSMP, EPM, connector, credential rotation, reconciliation, and session-launch issues.
• · Monitor CyberArk component availability, logs, alerts, audit trails, service health, capacity, and integration dependencies; identify root causes and implement corrective and preventive actions.
• · Investigate privileged-access security events and support incident response, evidence collection, access containment, and remediation activities.
• · Conduct periodic reviews of privileged accounts, Safes, memberships, entitlements, policies, inactive accounts, exceptions, and session activity.
• · Maintain operational documentation, architecture diagrams, build guides, standard operating procedures, recovery procedures, knowledge articles, and support playbooks.
• · Produce audit and compliance evidence aligned with organizational policies and applicable control frameworks such as NIST, ISO 27001, PCI DSS, and SOX.
• Why Join Us?
• We’ve been around since 1851. During our history, we’ve learned a few things about making sure our customers our top priority. In order to meet and exceed their expectations, we must have the best people providing the best thinking, products, and services. To accomplish this, we celebrate an inclusive, vibrant, and diverse culture that encourages growth, openness, and opportunities for everyone. A career with MassMutual, Great Place to Work® certified and India's Best Workplaces in BFSI 2023 - Top 50 organization means you will be part of a strong, stable, and ethical business with industry leading pay and benefits. And your voice will always be heard.
• Does this sound like a great fit? Apply today!