PAM Architect/SME

Stefanini North America and APAC; Gurugram District; Presencial; INR 2.000.000 - 3.200.000; Jornada completa

Descripción de la vacante

Stefanini North America and APAC is seeking a Senior PAM Architect in Gurugram, India to design the PAM architecture strategy and guide the platform design using leading PAM tools such as CyberArk, HashiCorp Vault, and Microsoft Entra ID.

You will lead the deployment of PAM solutions focusing on workload access controls and secrets management, create policies, and work with security and IT teams to ensure regulatory compliance (PCI DSS, HIPAA, GDPR) and ongoing risk reduction; stay current with

Formación

• 7–10 years of hands-on PAM design and architecture experience as Architect/SME.
• Deep knowledge of PAM controls and IAM technologies.
• Experience with PCI DSS, HIPAA, or GDPR regulatory requirements.
• Experience with build vs. buy decision making.

Responsabilidades

• Develop comprehensive PAM architecture strategy aligned with business goals.
• Lead design and deployment of PAM solutions focusing on workload access controls and secrets management.
• Implement and manage secrets management for privileged credentials.
• Collaborate with stakeholders to ensure compliance and risk reduction.
• Stay current with PAM trends and drive enhancements.

Conocimientos

PAM

CyberArk

HashiCorp Vault

IAM

Regulatory compliance

RBAC / LDAP

Session management

DevOps secrets

Herramientas

CyberArk

StrongDM

HashiCorp Vault

Microsoft Entra ID

Descripción del empleo

Details

This role involves Privileged Access Management (PAM) Architect will be responsible for designing the PAM architecture strategy. This role will also require helping design the PAM platform with all its tools.

This role involves Privileged Access Management (PAM) Architect will be responsible for designing the PAM architecture strategy. This role will also require helping design the PAM platform with all its tools.

Job Role Includes

• Develop a comprehensive PAM architecture strategy that aligns with organizational objectives and regulatory requirements.
• Lead the design contribute to the development and deployment of PAM solutions, focusing on workload access controls and secrets management.
• Contribute to the implementation and management of secrets management solutions ensuring secure storage, access and rotation of privileged credentials.

Leverage PAM tools such as CyberArk, HashiCorp Vault, and Microsoft Entra ID to enhance security measures and streamline access management processes.

• Design PAM policies, standards, and procedures to ensure consistent and secure management of privileged accounts. Ensure PAM practices comply with organizational policies and regulatory requirements
• Assess the effectiveness of PAM controls, making data-driven decisions to reduce risk and enhance security posture.
• Collaborate with technology and business partners to identify and mitigate risks associated with privileged access.
• Stay current with emerging trends and technologies in PAM and cybersecurity and driving enhancements to existing solutions.

Job Requirements

Skills Required

• 7-10 years of experience in Privileged Access Management using PAM Solutions like CyberArk/StrongDM etc as an Architect/SME.
• Strong industry experience in architecting and designing PAM solutions and deployment across the enterprise.
• Deep technical understanding of PAM capabilities, controls and security technologies in areas related to identity and access management to address privilege-based risk.
• Familiarity with regulatory requirements related to PAM, such as PCI DSS, HIPAA, or GDPR.
• Expertise with build vs. buy solution options.
• Good understanding of security concepts and technologies in the wider Identity and Access Management space: Logical Access Controls, LDAP and RBAC, Authentication solutions, PKI concepts and SIEM solutions
• Proficient in Privileged Access Management (PAM) concepts and standard processes, covering privileged account discovery & vaulting, session management, DevOps secret management, and endpoint privilege management