Cyberark Admin

Tata Consultancy Services; Mumbai; On-site; INR 1,500,000 - 2,300,000; Full time

Job summary

Tata Consultancy Services seeks a CyberArk Administrator to join the IAM team in Mumbai or Kolkata. You will administer the Privileged Access Management platform, onboard privileged accounts, and configure PVWA/CPM/PSM in diverse environments.

Required is strong experience with PAM, RBAC, AD/LDAP integrations, and SSO. You will collaborate with IAM, SOC, Cloud, and Infra teams to ensure secure privileged access and compliance.

Qualifications

• CyberArk PAM administration experience with PVWA/CPM/PSM/PTA/EPM.
• Experience integrating CyberArk with AD/LDAP, SAML, MFA.
• Strong RBAC and least-privilege access policy skills.
• Experience across Windows, Linux, AWS, Azure, OCI environments.

Responsibilities

• Administer, maintain, and support the CyberArk PAM platform.
• Onboard and manage privileged accounts within CyberArk.
• Configure PVWA, CPM, PSM, Safes, and Privileged Session Management.
• Implement password vaulting, rotation, and reconciliation processes.
• Design RBAC and least-privilege access policies.
• Integrate CyberArk with AD/LDAP, SAML, MFA.
• Monitor privileged sessions and audit logs.
• Perform platform upgrades, patching, health checks.
• Generate compliance, audit, and entitlement reports.
• Collaborate with IAM, SOC, Cloud, Infra teams.
• Provide L2/L3 support for CyberArk incidents and changes.

Skills

CyberArk PAM Administration

Privileged Access Management

Password Rotation

Privileged Session Monitoring

Active Directory & Azure AD

SAML 2.0/OAuth/OpenID Connect

Single Sign-On

Tools

PVWA

CPM

PSM

PTA

EPM

Job description

Role: CyberArk Administrator

Location: Kolkata/Mumbai

Experience: 6-8 Years

Skillset:

• CyberArk PAM Administration (PVWA, CPM, PSM, PTA, EPM)
• Privileged Access Management (PAM)
• Password Rotation and Reconciliation
• Privileged Session Monitoring and Recording
• Privileged Access Management (PAM)
• Active Directory (AD) & Azure AD / Entra ID
• SAML 2.0, OAuth, OpenID Connect
• Single Sign-On (SSO)

Responsibilities:

• Administer, maintain, and support the CyberArk Privileged Access Management (PAM) platform.
• Onboard and manage privileged, administrative, service, and application accounts within CyberArk.
• Configure and manage CyberArk components including PVWA, CPM, PSM, Safes, and Privileged Session Management.
• Implement password vaulting, automated password rotation, and credential reconciliation processes.
• Design and enforce Role-Based Access Control (RBAC) and least-privilege access policies.
• Integrate CyberArk with Active Directory, LDAP, SAML, MFA, and enterprise identity platforms.
• Monitor privileged sessions, review audit logs, and support security monitoring and investigations.
• Troubleshoot authentication, connectivity, onboarding, and privileged access issues across CyberArk components.
• Perform CyberArk platform upgrades, patching, health checks, and operational maintenance activities.
• Generate compliance, audit, and entitlement reports to support governance and regulatory requirements.
• Collaborate with IAM, SOC, Cloud, Infrastructure, and Application teams to implement secure privileged access solutions.
• Support privileged access management across Windows, Linux, Database, Network, AWS, Azure, and OCI environments.
• Develop and maintain PAM operational procedures, standards, and technical documentation.
• Participate in security audits, risk assessments, access reviews, and remediation activities.
• Provide L2/L3 support for CyberArk incidents, service requests, and change management activities..

Preferred Certifications

• AWS Certified Security – Specialty
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)