Lead Security Engineer (Privileged Access Management )

Gartner, Inc.; Gurugram District; Hybrid; INR 2,500,000 - 4,000,000; Full time

Benefits offered by this job

World‑class benefits

Hybrid work environment

Competitive compensation

Disproportionate rewards for top‑perfo

Job summary

Gartner, Inc. seeks a Lead Security Engineer specializing in Privileged Access Management (PAM) to lead the IAM PAM function across on‑prem, SaaS, and multi‑cloud environments. You will shape technical strategy, drive architecture decisions, and mentor engineers while delivering secure, scalable PAM capabilities.

The role requires hands‑on engineering and strong collaboration with cross‑functional teams. You will guide deployments of enterprise vaults, secrets management, privileged session

Qualifications

• Bachelor’s or master’s degree in computer science, information systems, cybersecurity, or related field.
• 6–8 years IAM/cybersecurity experience including enterprise PAM platforms (CyberArk or similar).
• Demonstrated experience leading design and delivery of enterprise‑scale PAM programs.
• DevOps practices experience.
• Knowledge of information security tech, regulations, controls, industry standards.
• Hands‑on experience with PAM platforms (credential vaulting, session management).
• Experience with ZSP, JIT, and modern PAM controls.
• Strong cloud IAM understanding across AWS, Azure, GCP.

Responsibilities

• Provide technical leadership for IAM PAM engineering, architecture, and standards.
• Drive secure, scalable, and resilient PAM solutions across on‑prem, cloud, and multi‑cloud.
• Lead design, implementation, and operation of PAM systems and zero standing privileges workflows.
• Collaborate with stakeholders to ensure alignment with objectives and risk reduction.
• Mentor engineers, perform design reviews, and promote engineering best practices.
• Support IAM systems availability, participate in on‑call rotation.
• Define PAM metrics to demonstrate program effectiveness.

Skills

IAM/PAM

PAM leadership

Python

PowerShell

DevOps

Cloud IAM

ZSP/JIT

SRE/On-call

Leadership

Mentoring

Education

Bachelor's or Master's in CS/IS/Cybersecurity

Tools

CyberArk

HashiCorp Vault

Job description

About the role

We are seeking an experienced Lead Security Engineer specializing in Privileged Access Management (PAM) to join our Identity Management team. In this mission‑critical role, you will provide technical leadership for the design, implementation, and operation of enterprise PAM capabilities that secure privileged access across on‑premises infrastructure, SaaS platforms, and multi‑cloud environments. You will be responsible for defining technical strategy, driving architectural decisions, and leading the delivery of PAM initiatives that reduce organizational risk while enabling business agility. In addition to hands‑on engineering responsibilities, you will mentor team members, establish engineering standards, and drive execution of complex security projects from inception through operationalization.

What you’ll do

• Provide technical leadership for the IAM PAM engineering function, driving architecture, engineering standards, and operational excellence across privileged access solutions.
• Engage with technology leaders, business stakeholders, and cross‑functional teams to drive the delivery of secure, scalable, and resilient solutions, ensuring critical systems are protected and aligned with organizational objectives.
• Lead the design, implementation, and operationalization of privileged access management solutions, including enterprise vaults, secrets management, privileged session management, privileged endpoint controls, and Zero Standing Privileges (ZSP) workflows.
• Work within an agile environment to define requirements, prioritize work, manage technical dependencies, and ensure successful delivery of PAM capabilities.
• Develop and oversee automation, integrations, and self‑service capabilities that improve security posture and operational efficiency.
• Troubleshoot complex PAM issues and serve as a technical escalation point, providing guidance to engineers, stakeholders, and partner teams.
• Analyze enterprise privileged access use cases and develop detailed technical requirements, governance frameworks, and operational support models.
• Drive adoption of security‑by‑design principles across cloud, infrastructure, and application platforms.
• Mentor and develop engineers by providing technical coaching, design reviews, knowledge sharing, and guidance on engineering best practices.
• Ensure the reliability and availability of mission‑critical IAM systems and participate in the IAM On‑Call rotation.
• Define, track, and communicate PAM metrics and key performance indicators to demonstrate risk reduction, operational maturity, and program effectiveness.

What you’ll need

• Bachelor’s or master’s degree in computer science, Information Systems, Cybersecurity, or a related field.
• 6 to 8 years of experience in Identity and Access Management (IAM) and cybersecurity, including six or more years of experience implementing and operating enterprise PAM platforms such as CyberArk or similar solutions.
• Demonstrated experience leading the design and delivery of enterprise‑scale PAM programs and complex security initiatives.
• Experience working with fast‑paced operations and development teams; experience with DevOps practices is required.
• Knowledge of information security technologies, regulations, controls, and industry standards.
• Hands‑on experience with enterprise PAM platforms, including credential vaulting, privileged session management, secrets management, and privileged access governance.
• Experience with Zero Standing Privilege (ZSP), Just‑in‑Time (JIT), and other modern privileged access management controls.
• Strong understanding of cloud IAM and PAM capabilities and familiarity with IaaS and PaaS architectures across AWS, Azure, GCP, and other enterprise cloud platforms.
• Experience developing automation and integrations using scripting languages such as Python, PowerShell, or similar technologies.
• Ability to build and deploy automation on cloud platforms, with familiarity in Infrastructure as Code (IaC) practices.
• Working knowledge of IAM services, LDAP, Active Directory, single sign‑on (SSO), and federation protocols.
• Working knowledge of PKI fundamentals, certificate lifecycle management, and secrets management best practices.
• Experience defining technical requirements, engineering standards, governance models, and operational support processes.
• Proven ability to lead complex technical projects from solution design through implementation and operationalization.

Nice to have

• Familiarity with AI Agent Identity security concepts, including credential governance, delegated authorization, runtime access controls, and lifecycle management for autonomous and semi‑autonomous AI systems.
• Experience securing non‑human identities, including service accounts, workloads, APIs, automation platforms, and AI agents within enterprise PAM and Identity Security programs.
• Knowledge of machine identity authentication frameworks and standards, including SPIFFE/SPIRE and Zero Trust concepts.
• Relevant industry certifications such as CyberArk Defender/Sentry, CISSP, CCSP, Microsoft Certified: Azure Security Engineer Associate, AWS Certified Security - Specialty, or equivalent credentials.
• Experience working in highly regulated environments with stringent compliance, audit, and security requirements.

Who you are

A lifelong learner with a desire for continuous personal and professional development.

Someone with proven communication, collaboration, and critical thinking skills.

Able to build trusting, meaningful relationships with peers, stakeholders, partners, and suppliers.

Capable of defining and communicating risk in a business‑relevant language to both non‑technical and technical audiences, including Leadership teams.

Someone who can apply expert knowledge to solve complex business/technical issues.

Who are we?

At Gartner, Inc. (NYSE:IT), we guide the leaders who shape the world. Our mission relies on expert analysis and bold ideas to deliver actionable, objective business and technology insights, helping enterprise leaders and their teams succeed with their mission‑critical priorities. Since our founding in 1979, we’ve grown to 20,000 associates globally who support over 13,000 client enterprises in ~90 countries and territories. We do important, interesting and substantive work that matters. That’s why we hire associates with the intellectual curiosity, energy and drive to want to make a difference. The bar is unapologetically high. So is the impact you can have here.

Our vast, virtually untapped market potential offers limitless opportunities – opportunities that may not even exist right now – for you to grow professionally and flourish personally. How far you go is driven by your passion and performance. We hire remarkable people who collaborate and win as a team. Together, our singular, unifying goal is to deliver results for our clients. Our teams are inclusive and composed of individuals from different geographies, cultures, religions, ethnicities, races, genders, sexual orientations, abilities and generations. We invest in great leaders who bring out the best in you and the company, enabling us to multiply our impact and results. This is why, year after year, we are recognized worldwide as a great place to work.

Gartner is the world authority on AI

At Gartner, you’ll join a company at the very center of the AI revolution. Gartner has proactive, objective guidance throughout clients’ AI journeys. We set the standard for how organizations leverage artificial intelligence to drive meaningful impact. You’ll have access to unmatched resources, expertise, and technology, and play a key role in helping Gartner and our clients innovate and grow as we leverage AI to transform business and technology landscapes. It’s an exciting time to be at Gartner, with limitless opportunities to make a real impact, grow your skills, and build a lasting, meaningful career in a field that’s reshaping the way we operate. If you’re passionate about AI and want to be part of a team that’s guiding the leaders who shape the world, Gartner is the place for you.

What do we offer?

• world‑class benefits
• highly competitive compensation
• disproportionate rewards for top performers
• hybrid work environment providing flexibility and support for virtual and in‑person collaboration

The policy of Gartner is to provide equal employment opportunities to all applicants and employees without regard to race, color, creed, religion, sex, sexual orientation, gender identity, marital status, citizenship status, age, national origin, ancestry, disability, veteran status or any other legally protected status and to seek to advance the principles of equal employment opportunity. Gartner is committed to being an Equal Opportunity Employer and offers opportunities to all job seekers, including job seekers with disabilities.

If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation if you are unable or limited in your ability to use or access the Company’s career webpage as a result of your disability. You may request reasonable accommodations by calling Human Resources at [phone] or by sending an email to [e-mail].