Arcon Developer | Location Noida | 5 Days WFO | Sr Manager

Airtel; Dadri; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Airtel is seeking a Senior Manager PAM with deep hands‑on ARCON PAM expertise to drive architecture, engineering and operations for privileged access across production, DR and NDR environments. You will implement, govern and optimize PAM controls, sessions, vaulting and MFA/SSO integrations at scale.

The role requires strong technical depth in AD/LDAP, IAM/IGA, cloud IAM and security tooling, along with leadership of engineering and operations teams to ensure high availability and compliance.

Qualifications

• 9+ years in IT/Cybersecurity with hands-on ARCON PAM implementation/engineering.
• Experience managing PAM in large enterprises with extensive server/account estates.
• Strong problem-solving and architecture focus beyond pure project management.

Responsibilities

• Own ARCON PAM architecture, engineering and admin across Production, DR and NDR.
• Design secure PAM for on‑prem, private/public cloud and hybrid environments.
• Lead PAM integrations with AD/LDAP, IAM/IGA, SIEM, MFA and SSO platforms.

Skills

ARCON PAM

PAM Architecture

Privileged Account Management

PSM (Privileged Session Management)

Password Vaulting & Rotation

Session Recording & Monitoring

AD/LDAP Integration

MFA & SSO

Cloud IAM concepts

Disaster Recovery/HA

Job description

Role Summary

We are looking for a Senior Manager Privileged Access Management (PAM) with strong hands‑on expertise in ARCON PAM and deep understanding of enterprise IAM/PAM technologies. The role will be responsible for PAM & IAM architecture, engineering, implementation, operations, security governance, and transformation, supporting large‑scale and highly available environments.

Key Responsibilities

ARCON PAM – Deep Technical Expertise

• Own architecture, engineering and administration of ARCON PAM across Production, DR and NDR environments.
• Strong hands‑on knowledge of:
• ARCON PAM Server / Vault
• Gateway and Access Control components
• Password Vaulting & Password Rotation
• Privileged Session Management (PSM)
• Session Recording & Monitoring
• Privileged Account Discovery & Onboarding
• Application/Service Account Management
• SSH Key and credential management
• MFA and SSO integration
• Break-glass / emergency privileged access
• Design and troubleshoot PAM connectivity for Windows, Linux/Unix, databases, network devices, security devices and applications.
• Manage complex PAM deployments including HA, clustering, load balancing, DC/DR, failover and disaster recovery.
• Perform deep troubleshooting covering application, gateway, network, database, authentication and target‑system layers.
• Lead ARCON upgrades, migrations, patching, capacity planning and performance optimization.

PAM Architecture & Engineering

• Design enterprise PAM architecture for on‑premise, private cloud, public cloud and hybrid environments.
• Define secure architecture for privileged access across servers, databases, network devices, cloud workloads and applications.
• Design PAM integration with Active Directory/LDAP, IAM/IGA, SIEM, ITSM, MFA and SSO platforms.
• Drive onboarding automation and bulk onboarding for large server/application estates.
• Implement controls for human and non‑human privileged identities, including service accounts, application IDs and machine identities.
• Evaluate emerging controls such as JIT/JEA access, passwordless privileged access, secrets management and zero‑standing privilege.

IAM / Security Technology Depth

Candidate should have good technical understanding of:

• Active Directory, LDAP, Kerberos and authentication protocols
• SAML 2.0, OAuth 2.0, OpenID Connect and MFA
• IAM/IGA platforms such as IAM/OIG, SailPoint, Saviynt or equivalent
• Windows and Linux privileged account management
• Database privileged accounts – Oracle, MySQL, PostgreSQL, MS SQL etc.
• Cloud IAM concepts across AWS/Azure/OCI/GCP
• APIs, REST integrations and automation/scripting
• Networking concepts including DNS, TCP/IP, firewall, proxy, VIP/load balancer and TLS/SSL
• Encryption, key management, HSM and FIPS concepts
• SIEM/SOC integration and privileged activity monitoring

Governance, Risk & Compliance

• Establish PAM policies for privileged account lifecycle, password rotation, session monitoring and access reviews.
• Ensure least privilege, segregation of duties and controlled emergency access.
• Support security audits, risk assessments and compliance evidence.
• Working understanding of security frameworks/regulations such as ISO 27001, PCI DSS, RBI requirements, NIST and applicable regulatory controls.
• Own remediation of PAM‑related audit observations, vulnerabilities and security risks.

Leadership & Service Ownership

• Lead PAM engineering and operations teams.
• Own technical escalations and major incident resolution.
• Drive OEM/vendor engagements and challenge proposed solutions based on technical and architectural requirements.
• Define SLA/KPI, availability, capacity, resiliency and operational health metrics.
• Conduct architecture/design reviews, RCA reviews and security assessments.
• Mentor engineers and develop strong internal PAM technical capability.
• Work closely with IAM, Security, Infrastructure, Cloud, Network, Database and Application teams.

Required Experience

• 9+ years of overall IT/Cybersecurity experience and Strong ARCON PAM implementation/engineering experience mandatory.
• Experience managing PAM in a large enterprise environment with thousands of servers/accounts.
• Strong troubleshooting and solution‑design capability; the position requires technical depth and not only operational/project management experience.
• Experience leading PAM implementations, migrations, upgrades and DR/HA initiatives.

Preferred Skills

Primary: ARCON PAM, PAM Architecture, Privileged Account Management, PSM, Password Vaulting, Password Rotation, Session Management, HA/DR

Secondary: Active Directory, LDAP, IAM/IGA, SSO, MFA, Linux, Windows, Databases, REST APIs, SIEM, ITSM, Cloud IAM

Good to Have: CyberArk / BeyondTrust / Delinea / Sectona exposure, Secrets Management, HSM/KMS, JIT/JEA, DevOps/CI-CD secrets and Non‑Human Identity management.

Role & responsibilities