PAM Engineer

METRO Global Solution Center IN; Pune District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Metro Global Solution Center in Pune, India, is seeking an experienced CyberArk Engineer to manage and support CyberArk Privilege Cloud, EPM, CCP and Conjur. The role focuses on onboarding privileged accounts, secrets management, automation, and integration with enterprise tools.

The candidate will handle L2/L3 troubleshooting, incident resolution, and documentation, with scripting in PowerShell/Python to improve operations and reporting.

Qualifications

• 5–7 years total experience in IT security or PAM roles.
• Hands-on CyberArk experience for 5+ years is mandatory.
• Experience with CyberArk EPM, CCP, Conjur and PVWA.
• Proven ability to onboard privileged accounts and manage secrets.

Responsibilities

• Administer CyberArk Privilege Cloud components including CPM, PSM, PVWA, PTA.
• Implement and manage CyberArk EPM policies and application control.
• Onboard privileged accounts across Windows, Linux, DB, network and apps.
• Manage password rotation, session controls and reconciliation.
• Support CCP for application credential retrieval.
• Support Conjur for secrets in CI/CD pipelines and DevOps.
• Develop and maintain CyberArk connectors/plugins for secure app launches.
• Integrate CyberArk with Azure, Entra ID, ServiceNow, SIEM, Jira, SCCM, Intune.
• Assist with audit, compliance, governance and access reviews.
• Develop PowerShell/Python scripts for automation and reporting.

Skills

CyberArk EPM

CyberArk CCP

PowerShell

Python

Privileged account management

REST API integrations

Azure

Entra ID

Jira

ServiceNow

CI/CD integrations

Tools

CyberArk Privilege Cloud

Azure

Entra ID

ServiceNow

Jira

SIEM

SCCM

Intune

Jenkins

GitHub

Azure DevOps

Job description

Metro Global Solution Center (MGSC) is internal solution partner for METRO, a €31.6 Billion international wholesaler with operations in more than 30 countries. The store network comprises a total of 623 stores in 21 countries, of which 522 offer out-of-store delivery (OOS), and 94 dedicated depots. In 12 countries, METRO runs only the delivery business by its delivery companies (Food Service Distribution, FSD). HoReCa and Traders are core customer groups of METRO. The HoReCa section includes hotels, restaurants, catering companies as well as bars, cafés and canteen operators. The Traders section includes small grocery stores and kiosks. The majority of all customer groups are small and medium-sized enterprises as well as sole traders. METRO helps them manage their business challenges more effectively. MGSC, location wise is present in Pune (India), Düsseldorf (Germany) and Szczecin (Poland). We provide HR, Finance, IT & Business operations support to 31 countries, speak 24+ languages and process over 18,000 transactions a day. We are setting tomorrow’s standards for customer focus, digital solutions, and sustainable business models. For over 10 years, we have been providing services and solutions from our two locations in Pune and Szczecin. This has allowed us to gain extensive experience in how we can best serve our internal customers with high quality and passion. We believe that we can add value, drive efficiency, and satisfy our customers.

Website: https://www.metro-gsc.in
Company Size: 1000-1100
Headquarters: Pune, Maharashtra, India
Type: Privately Held
Inception: 2011

Job Description

Location

Pune, India (Onsite)

Experience

5-7 years total experience with minimum 5+ years hands-on CyberArk experience.

Mandatory Certifications

• CyberArk CDE / Sentry preferred

About the Role

We are looking for an experienced CyberArk Engineer to manage and support CyberArk Privilege Cloud (PCloud), Endpoint Privilege Manager (EPM), CCP, and Conjur environments. The role will focus on privileged account onboarding, endpoint privilege control, application secret management, connector development, operations support, troubleshooting, and automation.

Key Responsibilities

• Administer CyberArk Privilege Cloud components including CPM, PSM, PVWA, PTA.
• Implement and manage CyberArk EPM policies, agent deployment, privilege elevation, and application control.
• Onboard privileged accounts across Windows, Linux, Database, Network, and Application platforms.
• Manage password rotation, reconciliation, verification failures, and session controls.
• Implement and support CyberArk CCP for application credential retrieval.
• Implement and support CyberArk Conjur for secrets management in CI/CD pipelines, DevOps, and machine identities.
• Develop and maintain CyberArk PSM connectors/plugins for launching web applications, custom applications, and thick client applications securely through CyberArk.
• Integrate CyberArk with Azure, AWS, Entra ID, ServiceNow, SIEM, Jira, SCCM, Intune.
• Support secrets onboarding for Jenkins, GitHub, Azure DevOps, pipelines, containers, and automation tools.
• Perform L2/L3 troubleshooting, incident resolution, RCA, and operational improvements.
• Develop scripts using PowerShell/Python for automation and reporting.
• Support audit, compliance, governance, and periodic access reviews.

Mandatory Technical Skills

• CyberArk EPM
• CyberArk CCP
• PowerShell / Python
• REST API integrations
• Windows / Linux privileged account management

Nice to Have

• SQL / Database onboarding