Identity Engineer - Privilege Access

Jobgether; India; Hybrid; INR 3,500,000 - 7,000,000; Full time

Benefits offered by this job

Full-time employment

Hybrid working arrangement in India

Exposure to CyberArk Privileged Cloud

Job summary

Jobgether is seeking an experienced Identity Engineer - Privilege Access based in India to strengthen PAM and Non-Human Identity environments. You will own CyberArk Privileged Cloud, manage service accounts, API keys, and machine identities, and drive automation and governance across cloud and on-prem environments.

You will configure policies, automate onboarding and rotation, and collaborate with Security, Infra, and App teams to ensure least-privilege access and robust identity governance.

Qualifications

• Bachelor's degree recommended; equivalent professional experience will also be considered.
• 10+ years of cybersecurity, systems administration, or IAM experience, including at least 5 years with CyberArk Privileged Cloud.
• Strong understanding of Privileged Access Security architecture (Vault, PSM, CPM).
• Experience managing non-human identities at scale (service accounts, API keys, secrets, machine identities).
• Familiarity with secrets management tools: CyberArk Conjur, Secrets Hub, HashiCorp Vault; CI/CD credential security.
• Proficiency in TCP/IP networking, firewall, DNS, and certificate troubleshooting across on-prem and cloud (AWS/Azure/GCP).
• Experience with AD/LDAP, Microsoft Entra ID, SAML, OAuth 2.0, MFA, and SSO troubleshooting.
• Strong scripting in PowerShell and Python; REST APIs and CyberArk SDKs.
• Experience with log analysis, SIEM integration, incident response for privileged/non-human identity activity.
• Knowledge of SOX, PCI-DSS, NIST, ISO 27001; Zero Trust principles.
• CyberArk Trustee certification or higher preferred; cloud certs (AWS/Azure/GCP/CISSP/CISM/Security+) advantageous.
• Strong communication and documentation skills; ability to train teams.
• Ability to work across time zones and cultures; proactive and collaborative approach.

Responsibilities

• Administer CyberArk Privileged Cloud platform including vault, PSM/CPM operations.
• Configure password, access, and workflow policies for onboarding and rotation; enforce least-privilege access.
• Manage lifecycle of non-human identities: service accounts, API keys, secrets, certificates, machine identities.
• Establish and maintain NHI governance for discovery, ownership, rotation, expiration, and decommissioning.
• Administer secrets management and vaulting for applications, automation, and CI/CD pipelines.
• Troubleshoot PSM/CPM issues, remote access via RDP/SSH/web-based access, and privileged account management failures.
• Resolve network/connectivity issues (firewall, NAT, DNS, certs) affecting privileged access.
• Support authentication/authorization across AD/LDAP, SAML, OAuth 2.0, MFA, SSO for privileged/service accounts.
• Develop PowerShell and Python scripts using REST APIs and CyberArk SDKs to automate PAM/NHI onboarding and rotation.
• Monitor logs, SIEM integration, incident response; detect unusual privileged/non-human activity.
• Ensure SOX/PCI-DSS/NIST/ISO27001 compliance; promote best practices across teams.
• Collaborate with Security/Infrastructure/Application teams to integrate PAM/NHI solutions enterprise-wide.
• Document procedures and train owners/DevOps on secure credential and machine identity practices.
• Develop reports and Power BI dashboards to track rotation, orphaned accounts, vault usage, and audit posture.
• Promote disciplined ownership and continuous improvement.

Skills

Identity and access management

CyberArk Privileged Cloud

PAM/NHI governance

PowerShell scripting

Python scripting

REST APIs

SIEM integration

Network troubleshooting

Cloud and on-prem networking

Effective communication

Education

Bachelor's degree or equivalent

Tools

CyberArk Privileged Cloud

CyberArk Conjur

HashiCorp Vault

CI/CD tooling

CyberArk SDKs / REST APIs

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Identity Engineer - Privilege Access based in India.

This is an opportunity for an experienced identity security professional to strengthen enterprise Privileged Access Management (PAM) and Non-Human Identity (NHI) environments. You will take ownership of the CyberArk Privileged Cloud platform and the secure lifecycle management of service accounts, API keys, secrets, certificates, and machine identities. Your work will help protect critical systems by enforcing least-privilege access, improving credential security, and ensuring reliable identity governance across cloud, on-premises, and hybrid environments. Combining hands-on platform administration with advanced troubleshooting, you will partner with Security, Infrastructure, and Application teams to resolve complex access challenges and respond to security incidents. You will also drive automation, monitoring, reporting, and operational improvements to make identity practices more scalable and consistent. This role offers the opportunity to contribute to enterprise-wide security initiatives while collaborating with diverse teams across global business environments.

Accountabilities

• Administer and support the CyberArk Privileged Cloud platform, including user and group management, safe administration, vault configuration, and PSM/CPM operations.

• Configure and enforce password, access, and workflow policies to support privileged account onboarding, credential rotation, and least-privilege access.

• Manage the full lifecycle of non-human identities, including service accounts, API keys, secrets, certificates, and machine or workload identities.

• Establish and maintain NHI governance processes covering identity discovery, ownership assignment, credential rotation, expiration monitoring, and decommissioning of unused or orphaned identities.

• Administer secrets management and vaulting solutions for applications, automation, and CI/CD pipelines, reducing hard-coded credentials and unnecessary standing privileged access.

• Troubleshoot PSM and CPM issues, including remote access connectivity through RDP, SSH, and web-based access, as well as privileged account management failures.

• Resolve complex network and connectivity issues involving firewall rules, NAT, DNS, and certificate chain validation affecting privileged and non-human access.

• Support authentication and authorization troubleshooting across Active Directory/LDAP, SAML, OAuth 2.0, MFA, and SSO integrations for privileged and service accounts.

• Develop PowerShell and Python scripts, leveraging REST APIs and CyberArk SDKs, to automate PAM and NHI onboarding, discovery, credential rotation, and reporting.

• Monitor and analyze CyberArk, system, and network logs, supporting SIEM integration, detection of unusual privileged or non-human activity, and incident response.

• Apply privileged access and NHI security best practices while supporting compliance with SOX, PCI-DSS, NIST, and ISO 27001 requirements.

• Collaborate with Security, Infrastructure, and Application teams to integrate PAM and NHI solutions across enterprise and operating company environments.

• Document technical procedures, configurations, and incident reports, and train application owners and DevOps teams on secure credential and machine identity practices.

• Develop reports and Power BI dashboards to track PAM and NHI performance, including credential rotation status, unmanaged or orphaned accounts, safe and vault utilization, and audit and compliance posture.

• Promote operational discipline, transparency, ownership, staff training, and continuous improvement to ensure identity management processes remain scalable, measurable, and repeatable.

Requirements:

• Bachelor's degree recommended; equivalent professional experience will also be considered.

• More than 10 years of experience in cybersecurity, systems administration, or identity and access management, including at least 5 years of hands‑on experience with CyberArk Privileged Cloud.

• Strong understanding of Privileged Access Security architecture, including Vault, PSM, CPM, and Cloud Entitlements Manager.

• Demonstrated experience managing non‑human identities at scale, including service accounts, API keys, secrets managers, and machine or workload identities.

• Familiarity with secrets management tools and practices, such as CyberArk Conjur, Secrets Hub, HashiCorp Vault, or equivalent solutions, along with CI/CD credential security.

• Proficiency in TCP/IP networking, firewall administration, and DNS and certificate troubleshooting across on‑premises and cloud environments, including AWS, Azure, and GCP.

• Experience with Active Directory/LDAP, Microsoft Entra ID, SAML, OAuth 2.0, MFA, and SSO authentication and authorization troubleshooting.

• Strong scripting skills in PowerShell and Python, with working knowledge of REST APIs and CyberArk SDKs.

• Experience with log analysis, SIEM integration, incident response, and root cause analysis, particularly involving privileged and non‑human identity activity.

• Knowledge of security compliance frameworks, including SOX, PCI-DSS, NIST, and ISO 27001, as well as Zero Trust security principles.

• CyberArk Trustee certification or higher preferred; additional cloud platform or security certifications such as AWS, Azure, GCP, CISSP, CISM, or Security+ are advantageous.

• Strong communication and documentation skills, with the ability to explain technical concepts to non-technical stakeholders and train application owners and DevOps teams.

• Ability to work effectively across enterprise and operating company environments, balancing global standards with local business requirements and collaborating across multiple time zones and cultures.

• A proactive, collaborative approach aligned with continuous improvement, transparency, accountability, and ownership.

Benefits:

• Full-time employment.

• Hybrid working arrangement in India.

• Opportunity to work with enterprise-scale privileged access and non-human identity security technologies.

• Exposure to CyberArk Privileged Cloud and secrets management solutions.

• Collaboration with global Security, Infrastructure, and Application teams.

• Opportunity to contribute to enterprise-wide cybersecurity, automation, and continuous improvement initiatives.