CyberArk Engineer - PAM

MassMutual; Hyderabad; On-site; INR 1,500,000 - 2,300,000; Full time

Job summary

MassMutual India seeks a CyberArk PAM Engineer to join our Hyderabad team. You will implement, administer, integrate, and support CyberArk PAM across enterprise environments, ensuring secure privileged access and governance.

You will collaborate with IAM, IT security, and operations, perform incident support, access reviews, and automation using PowerShell, Python, Bash, and REST APIs, while aligning with NIST/ISO controls and SOX compliance.

Qualifications

• Bachelor’s degree or equivalent experience in Computer Science, IT, Cybersecurity, Engineering, or related field.
• 7+ years of experience in cybersecurity, IAM, or infrastructure security with enterprise PAM exposure.
• Hands-on CyberArk implementation, administration, integration, troubleshooting, and production support.

Responsibilities

• Provide L2/L3 support for CyberArk incidents, requests, problems, and changes.
• Monitor CyberArk components, logs, alerts, audit trails, and integration dependencies.
• Investigate privileged-access security events and support incident response and remediation.
• Conduct periodic reviews of privileged accounts, Safes, memberships, and entitlements.
• Maintain operational docs, architecture diagrams, and runbooks.
• Produce audit evidence aligned with NIST/ISO 27001/PCI DSS/SOX.

Skills

CyberArk EPV

Digital Vault

PVWA

CPM

PSM

PSMP

EPM

Privileged onboarding

Safe configuration

Session isolation

Session monitoring

Policy creation

Active Directory

LDAP

Windows Server

Unix/Linux

Networking basics

Databases

Service accounts

Authentication protocols

IAM concepts

MFA

SSO

Zero Trust

SAML integration

REST APIs

PowerShell

Python

Bash

Troubleshooting

Education

Bachelor’s degree in Computer Science or related field

Job description

Who We Are – MassMutual India

Since 1851, MassMutual’s commitment has always been to help people protect their families, support their communities, and help one another. Therefore, we want to inspire people to Live Mutual. We at MassMutual value diversity and inclusion. We’re people helping people

A career with us means you will work alongside exceptional people and be empowered to reach your professional and personal goals. Our employees are the foundation of what makes MassMutual a strong, stable, and ethical business. We seek and value unique and varied perspectives and experiences because we believe we are stronger when all voices are heard. We invite you to bring your bright, innovative ideas to MassMutual as we continue to help millions of Americans rely on each other.

Together, we’re stronger.

Job Description

Job Description: CyberArk, PAM Engineer

Location: Hyderabad

Required Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field, or equivalent relevant experience.
• At least 7 years of experience in cybersecurity, IAM, or infrastructure security, including substantial hands‑on experience supporting enterprise PAM solutions.
• Demonstrated hands‑on experience with CyberArk PAM implementation, administration, integration, troubleshooting, and production support.
• Experience working in enterprise environments with formal incident, request, problem, change, release, and access‑governance processes.

Must-Have Technical Skills

• Hands‑on expertise with CyberArk EPV, Digital Vault, PVWA, CPM, PSM, PSMP, and EPM.
• CyberArk privileged account onboarding, Safe and platform configuration, access controls, password rotation, reconciliation, verification, account dependencies, and service-account management.
• CyberArk PSM connection components, session isolation, recording, monitoring, command control, connector troubleshooting, and privileged‑session issue resolution.
• CyberArk EPM policy creation and tuning, endpoint least privilege, removal of local administrator rights, application control, privilege elevation, agent administration, and event analysis.
• Strong knowledge of Active Directory, LDAP, Windows Server, Unix/Linux, networking fundamentals, databases, service accounts, and authentication protocols.
• Knowledge of IAM/PAM concepts, including privileged identity lifecycle, RBAC, least privilege, separation of duties, access certification, MFA, SSO, and Zero Trust principles.
• Experience integrating CyberArk with SAML/MFA, SIEM, ITSM, directory services, monitoring tools, and enterprise applications.
• Scripting and automation experience using PowerShell, Python, Bash, and/or REST APIs.
• Strong troubleshooting, root‑cause analysis, documentation, stakeholder communication, and production‑support skills.

Operations, Troubleshooting, and Security Assurance

• Provide L2/L3 support for CyberArk incidents, service requests, problems, and changes; troubleshoot Vault, PVWA, CPM, PSM, PSMP, EPM, connector, credential rotation, reconciliation, and session-launch issues.
• Monitor CyberArk component availability, logs, alerts, audit trails, service health, capacity, and integration dependencies; identify root causes and implement corrective and preventive actions.
• Investigate privileged‑access security events and support incident response, evidence collection, access containment, and remediation activities.
• Conduct periodic reviews of privileged accounts, Safes, memberships, entitlements, policies, inactive accounts, exceptions, and session activity.
• Maintain operational documentation, architecture diagrams, build guides, standard operating procedures, recovery procedures, knowledge articles, and support playbooks.
• Produce audit and compliance evidence aligned with organizational policies and applicable control frameworks such as NIST, ISO 27001, PCI DSS, and SOX.

Why Join Us?

We’ve been around since 1851. During our history, we’ve learned a few things about making sure our customers our top priority. In order to meet and exceed their expectations, we must have the best people providing the best thinking, products, and services. To accomplish this, we celebrate an inclusive, vibrant, and diverse culture that encourages growth, openness, and opportunities for everyone. A career with MassMutual, Great Place to Work® certified and India’s Best Workplaces in BFSI 2023 - Top 50 organization means you will be part of a strong, stable, and ethical business with industry leading pay and benefits. And your voice will always be heard.