CyberArk Senior Engineer

Bounteous; Hyderabad, Gurugram District, Bengaluru; Hybrid; INR 4,000,000 - 7,000,000; Full time

Benefits offered by this job

CyberArk Defender certification

Job summary

Bounteous is seeking an experienced CyberArk PAM specialist to join our security operations team in Hyderabad. The role focuses on administering CyberArk PAM across EPV, PVWA, CPM, and PSM with hands-on production support.

The ideal candidate will manage Safe provisioning, platform onboarding, and bulk account operations on Windows and Linux, leveraging CyberArk REST API and PACLI for automation while adhering to runbooks and change-control processes in a regulated environment.

Qualifications

• 5+ years hands-on experience administering CyberArk PAM (EPV, PVWA, CPM, PSM) including production support.
• Practical experience with CyberArk Safe, Platform, and Account onboarding at scale across Windows and Unix/Linux estates.
• Working knowledge of CyberArk REST API and PACLI for bulk account operations.
• Experience with CP (Credential Provider) and CCP (Central Credential Provider) configuration and troubleshooting.
• Familiarity with Active Directory and certificate-based authentication (mTLS) in an application-integration context.
• Comfortable working to defined runbooks and change-control processes in a regulated environment.
• Strong troubleshooting skills across Windows Server and Linux platforms.

Skills

CyberArk PAM administration

Production support

Windows/Linux troubleshooting

CyberArk API / PACLI

CP/CCP configuration

Active Directory / mTLS

Runbooks & change control

Scripting (PowerShell/Python)

Tools

CyberArk Safe / Platform

Account onboarding at scale

Job description

Required experience & skills

• 5+ years hands-on experience administering CyberArk PAM (EPV, PVWA, CPM, PSM), including production support.
• Practical experience with CyberArk Safe, Platform, and Account onboarding at scale, across Windows and Unix/Linux estates.
• Working knowledge of CyberArk REST API and PACLI for bulk account operations.
• Experience with CP (Credential Provider / agent) and CCP (Central Credential Provider) configuration and troubleshooting.
• Familiarity with Active Directory and certificate-based authentication (mTLS) in an application-integration context.
• Comfortable working to defined runbooks and change-control processes in a regulated environment.
• Strong troubleshooting skills across Windows Server and Linux platforms.

Preferred / nice to have

• CyberArk Defender certification.
• Experience with a prior CyberArk version migration (v10/v11/v12 v13/v14).
• Exposure to SailPoint or another IGA platform in a joint IGA/PAM environment.
• Scripting ability (PowerShell/Python) for migration automation and reconciliation reporting.
• Experience supporting MFA migrations (e.g. RSA SecurID to Entra MFA).