PAM CyberArk Engineer

FNZ Group; Pune District; On-site; INR 1,400,000 - 1,800,000; Full time

Job summary

FNZ is seeking an Identity Security CyberArk Engineer to design, automate and implement CyberArk-based privileged access management within the Identity Security function. The role requires collaborating with global engineering teams and knowledge of identity stores such as EntraID and Active Directory.

You will script automated solutions, engage with stakeholders to solutionise identity concepts, and contribute to governance, controls and security documentation across multiple platforms.

Qualifications

• Design, automation and implementation of Identity and Privileged Access Management solution (CyberArk).
• Knowledge of identity stores (EntraID, Active Directory) and cloud identity concepts.

Responsibilities

• Contribute to the development and maintenance of CyberArk-based privileged access controls.
• Support governance, oversight of security controls, and security documentation across platforms.
• Support implementation of Just in Time and least privileged processes using CyberArk.
• Coordinate with the Identity Security Team and global engineering groups.

Job description

Job Title

Identity Security CyberArk Engineer

Location

Pune, India

Reports to

Tech Security Ops Engineering Manager

Role Description

At FNZ, our purpose is to make wealth management more accessible, bringing easier, fairer and more inclusive solutions to people worldwide. Here within the Security Technology and Ops team, we are on a mission to embed cyber resilience across FNZ, protecting the platforms that support investment solutions for over 20 million people.

We are seeking a CyberArk engineer to support the design, automation and implementation of Identity and Privileged access management solution (CyberArk). Must have knowledge of identity stores (e.g. EntraID and Active Directory) and cloud identity concepts. Will work across identity solutions as part of Identity security team such as Secrets Management and CyberArk. Must be able to script automated solutions and engage with business stakeholders to solutionise identity concepts.

The successful candidate will combine deep technical expertise in security platforms with other engineers, drive operational maturity, and deliver engineering improvements across multiple security domains. This role sits within Identity Security. The focus is on engineering and. You will work closely with global engineering teams and the Identity Security function across the global audience.

Specific Role Responsibilities

• Contribute to the development and improvement of the group privileged Access tool (CyberArk)
• Drive initiatives to mature security controls, services and processes. Support in building effective governance and oversight of security controls and services.
• Support in the delivery of the Global technology strategy, Working with the Identity Security Team.
• Contribute to the development and maintenance of formal security documentation (i.e. policies, standards).
• Support the implementation of Just in Time, Least privileged processes using CyberArk
• Support the Global CyberArk Instances (currently 3 on prem instances in place)
• support a controlled monitoring function to manage user sessions
• support Groups and users within Groups for key platforms and services
• Support in the development and delivery of consistent global services that enable delivery of the business goals.