Engineer, Privileged Access Management

Danaher; Bengaluru; On-site; INR 3,500,000 - 6,000,000; Full time

Job summary

Danaher in India is seeking a highly skilled Engineer for Privileged Access Management based in Pune/Bangalore. You will operate PAM platforms (CyberArk, BeyondTrust, Delinea), build automation with PowerShell and Python, and coordinate with global teams to enforce least privilege.

The role demands deep hands-on PAM experience, AD/Windows-Linux administration, and cloud IAM collaboration. You'll report to the Global Lead, Identity Security, and work onsite in Pune/Bangalore while contributing to

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, IT, Engineering or related field.
• 9+ years in cybersecurity or IT with hands-on privileged access management.
• Hands-on experience with enterprise PAM platforms (CyberArk, BeyondTrust, Delinea).
• Experience with AD, Windows/Linux, and cloud IAM for PAM.

Responsibilities

• Engineer/operate PAM platforms including vaults, rotation, and session recording.
• Build automation using PowerShell, Python, and REST APIs for onboarding and rotation.
• Contribute to reference-pattern implementation and feed insights to design.
• Support sustainability with runbooks, health checks, and ownership records.

Skills

Privileged access management

Automation scripting

REST APIs

PowerShell

Python

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field

Tools

CyberArk

BeyondTrust

Delinea

Active Directory

Windows Server

Linux

Job description

Bring more to life. At Danaher, our work saves lives. And each of us plays a part. Fueled by our culture of continuous improvement, we turn ideas into impact – innovating at the speed of life.

Our 60,000+ associates work across the globe at more than 15 unique businesses within life sciences, diagnostics, and biotechnology.

Are you ready to accelerate your potential and make a real difference? At Danaher, you can build an incredible career at a leading science and technology company, where we’re committed to hiring and developing from within. You’ll thrive in a culture of belonging where you and your unique viewpoint matter.

Learn about the Danaher Business System which makes everything possible.

At Danaher, an Engineer, Privileged Access Management builds, configures, operates, and troubleshoots the PAM platform. Strategy and architecture are set by leadership and the PAM Architect/Global Lead; the Engineer executes within that design, onboarding privileged accounts and operationalizing least privilege. The Engineer works independently on assigned scope and coordinates with system owners across teams with their own environments.

This position reports to the Global Lead, Identity Security and is part of the enterprise-wide Danaher Information Security (DIS) in Pune/Bangalore and will be an onsite role.

In This Role, You Will Have The Opportunity To

• Engineer/operate PAM platforms: safes, policies, connectors, session recording, password rotation, discovery jobs, endpoint privilege policies, and integrations.
• Build automation (PowerShell/Python, REST APIs) for onboarding, rotation, and reconciliation.
• Contribute to reference-pattern implementation defined by the Architect; feed operational reality back into design.
• Support the sustainability model: runbooks, health checks, and managed-account ownership records.

The Essential Requirements Of The Job Include

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field.
• 9+ years of cybersecurity or IT experience with hands-on privileged access management.
• Hands-on experience operating enterprise PAM platforms (such as CyberArk, BeyondTrust, or Delinea): onboarding, vaulting, password rotation, session recording, and discovery.
• Experience with Active Directory, Windows/Linux administration, and cloud IAM in support of privileged account management.
• Experience automating PAM tasks with scripting (such as PowerShell or Python) and REST APIs.

It would be a plus if you also possess previous experience in

• Experience with endpoint privilege management or cloud PAM.
• CyberArk Defender/Guardian, Security+, or a cloud security certification.
• Experience supporting global or multi-business-unit environments.
• Onboard privileged/service accounts; manage safes, policies, and connectors.
• Triage failed rotations, vaulted-credential issues, and access-workflow failures.
• Remediate orphaned/shared/admin accounts; run and tune discovery jobs.
• Monitor privileged activity; support incident response and change control.
• Collect audit evidence; document configurations and runbooks.
• Coordinate with Windows/Linux, AD, and cloud owners on account integration.

Join our winning team today. Together, we’ll accelerate the real-life impact of tomorrow’s science and technology. We partner with customers across the globe to help them solve their most complex challenges, architecting solutions that bring the power of science to life.

For more information, visit www.danaher.com.