CyberArk Engineer - PAM

MassMutual India; Hyderabad; On-site; INR 2,500,000 - 4,200,000; Full time

Job summary

MassMutual India is seeking a CyberArk PAM Engineer to join our security team in Hyderabad. You will bring hands-on CyberArk expertise to design, implement, and support privileged access management across enterprise environments.

Ideal candidates will have 7+ years in cybersecurity or IAM, strong incident and change governance experience, and the ability to operate in a complex, regulated setting. Join a diverse, collaborative team focused on robust security controls.

Qualifications

• Bachelor's degree or equivalent experience in CS/IT/Engineering.
• 7+ years in cybersecurity, IAM or infrastructure security with PAM exposure.
• Hands‑on CyberArk PAM implementation, admin, integration, troubleshooting, production support.
• Experience in enterprise security processes: incident, change, release, access governance.

Responsibilities

• Provide L2/L3 CyberArk incident, service request, problem, and change support.
• Monitor component availability, logs, alerts, and audit trails; ensure service health.
• Investigate privileged-access security events and support incident response and containment.
• Review privileged accounts, Safes, memberships, entitlements, policies, and session activity periodically.
• Maintain operational docs, architecture diagrams, SOPs, recovery procedures, and knowledge articles.
• Produce audit evidence aligned with NIST, ISO 27001, PCI DSS, and SOX.

Skills

CyberArk IAM

Incident handling

Troubleshooting

Automation scripting

Active Directory / LDAP

Security governance

Education

Bachelor's degree in CS/IT/Engineering

Tools

CyberArk EPV

CyberArk Digital Vault

CyberArk PVWA

CyberArk CPM/PSM/PSMP/EPM

Job description

Job Description:

Who We Are – MassMutual India

Since 1851, MassMutual’s commitment has always been to help people protect their families, support their communities, and help one another. Therefore, we want to inspire people to Live Mutual. We at MassMutual value diversity and inclusion. We’re people helping people

A career with us means you will work alongside exceptional people and be empowered to reach your professional and personal goals. Our employees are the foundation of what makes MassMutual a strong, stable, and ethical business. We seek and value unique and varied perspectives and experiences because we believe we are stronger when all voices are heard. We invite you to bring your bright, innovative ideas to MassMutual as we continue to help millions of Americans rely on each other.

Together, we’re stronger.

Job Description

Job Description: CyberArk, PAM Engineer

Location: Hyderabad

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field, or equivalent relevant experience.
• At least 7 years of experience in cybersecurity, IAM, or infrastructure security, including substantial hands‑on experience supporting enterprise PAM solutions.
• Demonstrated hands‑on experience with CyberArk PAM implementation, administration, integration, troubleshooting, and production support.
• Experience working in enterprise environments with formal incident, request, problem, change, release, and access‑governance processes.

Must-Have Technical Skills

• Hands‑on expertise with CyberArk EPV, Digital Vault, PVWA, CPM, PSM, PSMP, and EPM.
• CyberArk privileged account onboarding, Safe and platform configuration, access controls, password rotation, reconciliation, verification, account dependencies, and service‑account management.
• CyberArk PSM connection components, session isolation, recording, monitoring, command control, connector troubleshooting, and privileged‑session issue resolution.
• CyberArk EPM policy creation and tuning, endpoint least privilege, removal of local administrator rights, application control, privilege elevation, agent administration, and event analysis.
• Strong knowledge of Active Directory, LDAP, Windows Server, Unix/Linux, networking fundamentals, databases, service accounts, and authentication protocols.
• Knowledge of IAM/PAM concepts, including privileged identity lifecycle, RBAC, least privilege, separation of duties, access certification, MFA, SSO, and Zero Trust principles.
• Experience integrating CyberArk with SAML/MFA, SIEM, ITSM, directory services, monitoring tools, and enterprise applications.
• Scripting and automation experience using PowerShell, Python, Bash, and/or REST APIs.
• Strong troubleshooting, root‑cause analysis, documentation, stakeholder communication, and production‑support skills.

Operations, Troubleshooting, and Security Assurance

• Provide L2/L3 support for CyberArk incidents, service requests, problems, and changes; troubleshoot Vault, PVWA, CPM, PSM, PSMP, EPM, connector, credential rotation, reconciliation, and session‑launch issues.
• Monitor CyberArk component availability, logs, alerts, audit trails, service health, capacity, and integration dependencies; identify root causes and implement corrective and preventive actions.
• Investigate privileged‑access security events and support incident response, evidence collection, access containment, and remediation activities.
• Conduct periodic reviews of privileged accounts, Safes, memberships, entitlements, policies, inactive accounts, exceptions, and session activity.
• Maintain operational documentation, architecture diagrams, build guides, standard operating procedures, recovery procedures, knowledge articles, and support playbooks.
• Produce audit and compliance evidence aligned with organizational policies and applicable control frameworks such as NIST, ISO 27001, PCI DSS, and SOX.

Why Join Us?

We’ve been around since 1851. During our history, we’ve learned a few things about making sure our customers our top priority. In order to meet and exceed their expectations, we must have the best people providing the best thinking, products, and services. To accomplish this, we celebrate an inclusive, vibrant, and diverse culture that encourages growth, openness, and opportunities for everyone. A career with MassMutual, Great Place to Work® certified and India's Best Workplaces in BFSI 2023 - Top 50 organization means you will be part of a strong, stable, and ethical business with industry leading pay and benefits. And your voice will always be heard.

Does this sound like a great fit?