Cyberark Admin

Tata Consultancy Services; Mumbai; On-site; INR 2,500,000 - 3,500,000; Full time

Job summary

Tata Consultancy Services in Mumbai seeks an experienced CyberArk PAM administrator to manage and secure privileged access across on‑prem and cloud environments.

You will onboard privileged accounts, implement password rotation, enforce RBAC and least‑privilege policies, and integrate PAM with AD/LDAP, SAML, and MFA. You will monitor sessions, conduct audits, and collaborate with IAM, SOC, and infra teams to strengthen governance.

Qualifications

• Experience administering CyberArk PAM platform.
• Onboard and manage privileged accounts (administrative, service, application).
• Implement password vaulting and automated rotation/credential reconciliation.

Responsibilities

• Administer and support CyberArk PAM platform.
• Onboard privileged, administrative, service, and application accounts.
• Configure PVWA, CPM, PSM, Safes, and Privileged Session Manager.
• Implement password vaulting and automated rotation.
• Design RBAC and least-privilege access policies.
• Integrate CyberArk with AD/LDAP, SAML, MFA, and identity platforms.
• Monitor privileged sessions and audit logs; support investigations.
• Troubleshoot access issues across CyberArk components.
• Upgrade, patch, health-check, and maintain CyberArk environment.
• Generate compliance, audit, and entitlement reports.

Skills

CyberArk PAM

RBAC

Least Privilege

SSO

Account Onboarding

Tools

PVWA

CPM

PSM

PTA

EPM

Safes

Active Directory

LDAP

SAML

MFA

Job description

• CyberArk PAM Administration (PVWA, CPM, PSM, PTA, EPM)
• Privileged Access Management (PAM)
• Password Rotation and Reconciliation
• Privileged Session Monitoring and Recording
• Privileged Access Management (PAM)
• SAML 2.0, OAuth, OpenID Connect
• Single Sign-On (SSO)

Responsibilities:

• Administer, maintain, and support the CyberArk Privileged Access Management (PAM) platform.
• Onboard and manage privileged, administrative, service, and application accounts within CyberArk.
• Configure and manage CyberArk components including PVWA, CPM, PSM, Safes, and Privileged Session Management.
• Implement password vaulting, automated password rotation, and credential reconciliation processes.
• Design and enforce Role-Based Access Control (RBAC) and least-privilege access policies.
• Integrate CyberArk with Active Directory, LDAP, SAML, MFA, and enterprise identity platforms.
• Monitor privileged sessions, review audit logs, and support security monitoring and investigations.
• Troubleshoot authentication, connectivity, onboarding, and privileged access issues across CyberArk components.
• Perform CyberArk platform upgrades, patching, health checks, and operational maintenance activities.
• Generate compliance, audit, and entitlement reports to support governance and regulatory requirements.
• Collaborate with IAM, SOC, Cloud, Infrastructure, and Application teams to implement secure privileged access solutions.
• Support privileged access management across Windows, Linux, Database, Network, AWS, Azure, and OCI environments.
• Develop and maintain PAM operational procedures, standards, and technical documentation.
• Participate in security audits, risk assessments, access reviews, and remediation activities.
• Provide L2/L3 support for CyberArk incidents, service requests, and change management activities..

Preferred Certifications

• AWS Certified Security – Specialty
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)