CyberArk Security Engineer

Delta Tech Hub; Bengaluru; On-site; INR 1,200,000 - 2,000,000; Full time

Job summary

Delta Tech Hub in Bengaluru seeks a CyberArk PAM Engineer with 3–7 years of hands-on experience across CyberArk PAM, EPM, and Privilege Cloud. The role covers PAM architecture, provisioning, and integration with Identity services and AWS, ensuring secure privileged access across on-prem and cloud environments.

The ideal candidate will hold CyberArk Sentry or higher certification, capable of designing scalable PAM solutions, and collaborating with security, IAM, and cloud teams to implement best

Qualifications

• 3–7 years of hands-on CyberArk PAM experience
• Experience with CyberArk components: Vault, CPM, PSM, PTA
• Certification such as CyberArk Sentry or higher required/advantageous

Responsibilities

• Design, deploy and maintain CyberArk PAM solutions for hybrid/cloud environments
• Administer and optimize EPM policies to enforce least privilege
• Implement Privilege Cloud onboarding, session recording, and password rotation
• Configure CyberArk Identity integrations with enterprise apps and directories
• Manage CyberArk infrastructure on AWS including sizing, HA/DR, backup and patching
• Integrate CyberArk with LDAP/AD, RADIUS, SIEM, and ticketing tools
• Develop onboarding workflows and policies for privileged accounts across on-prem/cloud/SaaS
• Monitor, troubleshoot and resolve PAM/EPM/Privilege Cloud/Identity issues
• Collaborate with security, IAM, cloud and app teams to design secure access patterns
• Produce/runbooks/diagrams and support audits with remediation plans

Skills

CyberArk PAM

EPM

Privilege Cloud

Identity (IDaaS/SSO/MFA)

AWS integration

Security collaboration

Tools

CyberArk PAM

EPM

Privileged Session Manager (PSM)

Job description

Role overview

Hiring for a CyberArk PAM Engineer with 3-7 years of hands- on experience across CyberArk PAM, EPM, CyberArk Privilege Cloud, CyberArk Identity, and managing CyberArk infrastructure on AWS, holding CyberArk Sentry or higher certification.

Responsibilities include, but are not limited to:

• Design, deploy, and maintain CyberArk Privileged Access Management (PAM) solutions including Vault, CPM, PSM, PTA and Privilege Cloud for hybrid and cloud-native environments.
• Administer and optimize CyberArk Endpoint Privilege Manager (EPM) policies to enforce least privilege and application control on servers and end-user endpoints.
• Implement and manage CyberArk Privilege Cloud, including onboarding of accounts, proxy-based access, session recording, and periodic password rotation.
• Configure and support CyberArk Identity (IDaaS/SSO/MFA) integrations with enterprise applications, directories, and cloud platforms.
• wn end-to-end CyberArk infrastructure on AWS: sizing and deploying components, HA/DR design, backup and recovery, patching, and performance tuning.
• Integrate CyberArk with LDAP/AD, RADIUS, SMTP, SIEM/Syslog, ticketing tools, and other security platforms following best practices.
• Develop and maintain onboarding workflows, platforms, and policies for privileged accounts and secrets across on-prem, cloud, and SaaS workloads.
• Monitor, troubleshoot, and resolve complex issues in PAM/EPM/Privilege Cloud/Identity environments, including advanced PSM and CPM configurations.
• Collaborate with security architecture, IAM, cloud, and application teams to design secure privileged access patterns and controls.
• Produce and maintain technical documentation, runbooks, and diagrams for CyberArk solutions and related integrations.
• Support audits and compliance activities by providing reports, evidence of control effectiveness, and remediation plans for findings.