Active Directory / CyberArk Engineer

Rwindia; Bengaluru; On-site; INR 1,000,000 - 1,800,000; Full time

Job summary

Rwindia is seeking an experienced Identity & Privileged Access Management engineer to manage Tier-0 AD environments and CyberArk PAM. You will implement security hardening, lifecycle processes for privileged identities, and cross-forest identity infrastructure across enterprise environments.

The role requires hands-on AD engineering, CyberArk expertise, and a solid understanding of Zero Trust principles, with a focus on automation and governance.

Qualifications

• 8+ years of IT experience.
• 5+ years of Active Directory administration and engineering.
• 3+ years of CyberArk PAM administration and implementation.
• Strong understanding of Tier-0 security architecture and privileged identity management.
• Knowledge of Entra ID (Azure AD), identity governance, automation, and Zero Trust principles.
• Bachelor’s degree in Computer Science, IT, Cybersecurity, or related discipline.

Responsibilities

• Manage Tier-0 Active Directory environments and privileged accounts.
• Implement AD security hardening and privileged access controls.
• Oversee provisioning, deprovisioning, and lifecycle management for privileged identities.
• Support multi-forest AD environments and identity infrastructure.
• Administer CyberArk PAM components (Password Vault, PSM, CPM, PTA, EPM).
• Onboard and maintain privileged accounts, safes, and platforms.
• Implement privileged access workflows, credential rotation, and session monitoring.
• Troubleshoot CyberArk and identity-related security risks.

Skills

Active Directory

Privileged Identity Management

Zero Trust

Identity Governance

Automation

Azure AD / Entra ID

Education

Bachelor’s degree in Computer Science or related field

Tools

CyberArk PAM

Entra ID / Azure AD

Job description

Job Summary

Manage and improve privileged identity lifecycle processes across enterprise environments. Ensure secure onboarding, modification, certification, monitoring, and offboarding of privileged accounts while maintaining security, regulatory compliance, and Zero Trust principles.

Key Responsibilities

• Manage Tier-0 Active Directory environments, including privileged accounts, administrative groups, service accounts, and domain controllers.
• Implement AD security hardening, privileged access controls, and security best practices.
• Manage provisioning, deprovisioning, and lifecycle processes for privileged identities.
• Support multi-forest Active Directory environments and identity infrastructure.
• Administer CyberArk PAM solutions, including Password Vault, PSM, CPM, PTA, and EPM.
• Onboard and maintain privileged accounts, safes, and platforms.
• Implement privileged access workflows, approval processes, credential rotation, and session monitoring.
• Troubleshoot CyberArk operational and integration issues and remediate identity-related security risks.

Required Skills & Experience

• 8+ years of overall IT experience.
• 5+ years of hands-on Active Directory administration and engineering experience.
• 3+ years of CyberArk PAM administration and implementation experience.
• Strong understanding of Tier-0 security architecture and privileged identity management.
• Knowledge of Entra ID (Azure AD), identity governance, automation, and Zero Trust principles.
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related discipline.

Preferred Qualifications

• Experience with enterprise identity governance and privileged access security controls.
• Experience managing complex Active Directory and CyberArk integrations.

Other Requirements

• Ability to maintain security and compliance standards for privileged and high-impact identities.