CyberArk Senior Security Engineer

Delta Tech Hub; Bengaluru; On-site; INR 1,200,000 - 2,200,000; Full time

Job summary

Delta Tech Hub in Bengaluru seeks a CyberArk PAM Engineer with hands-on experience across CyberArk PAM, EPM, Privilege Cloud, Identity, and managing CyberArk infrastructure on AWS.

You will design, deploy, and operate secure privileged access across on‑prem, cloud, and SaaS workloads, integrate with LDAP/AD, SIEM, and ticketing systems, and document processes and runbooks.

This role supports audits and compliance and requires collaboration with security, IAM, cloud, and application teams.

Responsibilities

• Design, deploy, and maintain CyberArk PAM solutions including Vault, CPM, PSM, PTA and Privilege Cloud.
• Administer and optimize EPM policies to enforce least privilege and application control.
• Implement and manage Privilege Cloud onboarding, password rotation, and session access.
• Configure and support CyberArk Identity integrations with apps, directories, and cloud platforms.
• Manage end-to-end CyberArk infrastructure on AWS: sizing, HA/DR, backup, patching, and performance tuning.
• Integrate CyberArk with LDAP/AD, RADIUS, SMTP, SIEM, ticketing tools and other security platforms.
• Develop onboarding workflows and policies across on‑prem, cloud, and SaaS workloads.
• Monitor, troubleshoot, and resolve PAM/EPM/Privilege Cloud/Identity issues, including PSM/ CPM.
• Collaborate with security, IAM, cloud, and application teams to design secure access patterns.
• Produce technical documentation, runbooks, and diagrams.
• Support audits by providing reports and remediation plans.

Job description

Role Summary:

The team is hiring for a CyberArk PAM Engineer with hands‑on experience across CyberArk PAM, EPM, CyberArk Privilege Cloud, CyberArk Identity, and managing CyberArk infrastructure on AWS, holding CyberArk Sentry or higher certification.

Role Responsibilities:

• Design, deploy, and maintain CyberArk Privileged Access Management (PAM) solutions including Vault, CPM, PSM, PTA and Privilege Cloud for hybrid and cloud‑native environments.
• Administer and optimize CyberArk Endpoint Privilege Manager (EPM) policies to enforce least privilege and application control on servers and end‑user endpoints.
• Implement and manage CyberArk Privilege Cloud, including onboarding of accounts, proxy‑based access, session recording, and periodic password rotation.
• Configure and support CyberArk Identity (IDaaS/SSO/MFA) integrations with enterprise applications, directories, and cloud platforms.
• end‑to‑end CyberArk infrastructure on AWS: sizing and deploying components, HA/DR design, backup and recovery, patching, and performance tuning.
• Integrate CyberArk with LDAP/AD, RADIUS, SMTP, SIEM/Syslog, ticketing tools, and other security platforms following best practices.
• Develop and maintain onboarding workflows, platforms, and policies for privileged accounts and secrets across on‑prem, cloud, and SaaS workloads.
• Monitor, troubleshoot, and resolve complex issues in PAM/EPM/Privilege Cloud/Identity environments, including advanced PSM and CPM configurations.
• Collaborate with security architecture, IAM, cloud, and application teams to design secure privileged access patterns and controls.
• Produce and maintain technical documentation, runbooks, and diagrams for CyberArk solutions and related integrations.
• Support audits and compliance activities by providing reports, evidence of control effectiveness, and remediation plans for findings.