Opening for Cyberark Engineer @ Mumbai

Quess IT Solutions; Mumbai; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

Quess IT Solutions seeks an experienced IAM/PAM specialist to strengthen enterprise security with hands-on PAM tooling, cloud identity governance, and robust scripting to automate onboarding and discovery processes.

The role emphasizes least privilege, zero trust principles, MFA enforcement, and secure break-glass procedures across Windows and Linux environments, leveraging PIM capabilities for privilege elevation control.

Qualifications

• Hands-on experience with at least one enterprise PAM tool (CyberArk PAS/Privilege Cloud, BeyondTrust Password Safe, Delinea/Thycotic) and Cloud PIM (Microsoft Entra ID PIM).
• Working knowledge of Windows Server (Active Directory, Kerberos, GPOs), Linux/Unix (SSH, PAM modules, sudoers), and networking fundamentals (firewall ports, DNS, RDP, SSH).
• Basic PowerShell, Bash, or Python scripting skills to assist with automated onboarding, discovery parsing, and API calls.
• Solid understanding of Least Privilege, Zero Trust, MFA, Session Isolation, and Break-Glass procedures.

Skills

PAM security

Identity & Access Management

Cloud PIM

Windows Server

Linux/Unix

Networking basics

Scripting (PowerShell, Bash, Python)

Zero Trust

MFA

Least Privilege

Session Isolation

Education

CyberArk Defender (PAM-DEF)

Sentry (PAM-SEN)

Microsoft Certified: Identity and Access Administrator Associate (SC-300)

CompTIA Security+ or SSCP

Tools

CyberArk PAS/Privilege Cloud

BeyondTrust Password Safe

Delinea/Thycotic

Microsoft Entra ID PIM

Job description

• Core Platforms: Hands-on experience with at least one enterprise PAM tool (CyberArk PAS/Privilege Cloud, BeyondTrust Password Safe, Delinea/Thycotic) and Cloud PIM (Microsoft Entra ID PIM).
• Operating Systems & Networking: Working knowledge of Windows Server (Active Directory, Kerberos, GPOs), Linux/Unix (SSH, PAM modules, sudoers), and networking fundamentals (firewall ports, DNS, RDP, SSH).
• Scripting: Basic PowerShell, Bash, or Python scripting skills to assist with automated onboarding, discovery parsing, and API calls.
• Security Principles: Solid understanding of Least Privilege, Zero Trust, MFA, Session Isolation, and Break-Glass procedures.

Preferred Certifications

• CyberArk Defender (PAM-DEF) or Sentry (PAM-SEN)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• CompTIA Security+ or SSCP