PAM Integration Engineer (Secrets Management)

OP; Bengaluru; On-site; INR 900,000 - 1,400,000; Full time

Job summary

OP is hiring a Security Engineer - SECRETS to join our Global Information Security IAM group. You will assist with application credential integrations and secrets management across CI/CD pipelines, helping secure credentials for cloud-native apps and services.

You will work with CyberArk, CA PAM, and cloud secrets platforms, developing reusable components in Python/PowerShell/Java/Node.js, and collaborating with DevOps and Cloud teams to secure Kubernetes workloads and service accounts.

Qualifications

• 3+ years of software engineering or integration engineering experience with exposure to API integrations and enterprise platforms.
• Working knowledge of at least one language used for integration development: Python, PowerShell, Java, JavaScript/Node.js.
• Familiarity with REST API design and consumption, including authentication patterns (OAuth2, API keys, mTLS).
• Exposure to CI/CD pipeline tooling and DevOps workflows (Jenkins, GitLab CI, GitHub Actions, Azure DevOps).
• Basic understanding of application secrets management challenges: hardcoded credentials, configuration file secrets, and connection string management.
• Ability to work collaboratively with application teams who may have limited PAM or security background.

Responsibilities

• Assist with implementing application credential integrations using PAM platform APIs (CyberArk CCP/AAM, CA PAM REST API) under senior engineer guidance.
• Support secrets injection tasks for CI/CD pipelines (Jenkins, GitLab CI, GitHub Actions, Azure DevOps) to help replace hardcoded or static credentials.
• Help onboard application accounts and service credentials into the PAM vault, coordinating with application owners under direction from senior engineers.
• Assist in developing reusable integration components in Python, PowerShell, Java, or Node.js based on established patterns.
• Support evaluation and integration tasks for DevOps secrets management platforms (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault) with the enterprise PAM platform.
• Help collaborate with Cloud and DevOps teams on securing container workloads, Kubernetes service accounts, and cloud-native application credentials.
• Help document integration patterns, API usage guidance, and developer onboarding guides for the application team community.
• Assist in troubleshooting integration failures across the application-to-vault authentication chain.

Skills

Python

PowerShell

Java

JavaScript/Node.js

REST API

OAuth2

CI/CD tools

Kubernetes

Terraform

HashiCorp Vault

AWS Secrets Manager

Azure Key Vault

GCP Secret Manager

Jenkins

GitLab CI

GitHub Actions

Azure DevOps

Education

Bachelor's degree in Computer Science, Information Systems, Software, Electrical or Electronics Engineering, or comparable field

Tools

CyberArk CCP/AAM

CA PAM

HashiCorp Vault

AWS Secrets Manager

Azure Key Vault

GCP Secret Manager

Jenkins

GitLab CI

GitHub Actions

Azure DevOps

Terraform

Job description

We are looking for a Security Engineer - SECRETS to join our Global Information Security - Identity and Access Management (IAM) group. This group is responsible for providing a Core IAM ecosystem of products and platforms in use across the company by cast members, employees, and partners within our business segments and corporate functions. Our vision is to provide modern Identity and Access Management capabilities and services that are simple, seamless, and secure to protect our workforce, our data, and our brands.

What You Ll Do

• Assist with implementing application credential integrations using PAM platform APIs (CyberArk CCP/AAM, CA PAM REST API) under senior engineer guidance.
• Support secrets injection tasks for CI/CD pipelines (Jenkins, GitLab CI, GitHub Actions, Azure DevOps) to help replace hardcoded or static credentials.
• Help onboard application accounts and service credentials into the PAM vault, coordinating with application owners under direction from senior engineers.
• Assist in developing reusable integration components in Python, PowerShell, Java, or Node.js based on established patterns.
• Support evaluation and integration tasks for DevOps secrets management platforms (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault) with the enterprise PAM platform.
• Help collaborate with Cloud and DevOps teams on securing container workloads, Kubernetes service accounts, and cloud-native application credentials.
• Help document integration patterns, API usage guidance, and developer onboarding guides for the application team community.
• Assist in troubleshooting integration failures across the application-to-vault authentication chain.

Required Qualifications & Skills

• 3+ years of software engineering or integration engineering experience, with exposure to API integrations and enterprise platforms.
• Working knowledge of at least one language used for integration development: Python, PowerShell, Java, JavaScript/Node.js.
• Familiarity with REST API design and consumption, including authentication patterns (OAuth2, API keys, mTLS).
• Exposure to CI/CD pipeline tooling and DevOps workflows (Jenkins, GitLab CI, GitHub Actions, Azure DevOps).
• Basic understanding of application secrets management challenges: hardcoded credentials, configuration file secrets, and connection string management.
• Ability to work collaboratively with application teams who may have limited PAM or security background.

Preferred Qualifications

• Hands-on experience with CyberArk CCP/AAM or CA PAM application integration APIs.
• Experience with HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, or GCP Secret Manager.
• Kubernetes and container security experience: pod identity, workload identity, Secrets Store CSI Driver.
• Infrastructure as Code experience (Terraform) for deploying and configuring integration components.
• Experience with non-human identity (NHI) management frameworks.
• Background in DevSecOps or secure SDLC practices.
• Master s degree in Information Technology, Information Security, Computer Science, or Business related field or equivalent validated work experience

Required Education

• Bachelor s degree in Computer Science, Information Systems, Software, Electrical or Electronics Engineering, or comparable field of study, and/or equivalent work experience.

Additional Responsibilities

• Participate in OP monthly team meetings and participate in team-building efforts.
• Contribute to OP technical discussions, peer reviews, etc.
• Contribute content and collaborate via the OP-Wiki/Knowledge Base.
• Provide status reports to OP Account Management as requested.

About Us

At OP, we help you harness the power of technology for maximum impact. A technology consulting and solutions company, we offer advisory and managed services, innovative platforms, and staffing solutions across a wide range of fields including AI, cyber security, enterprise architecture, and beyond. For nearly two decades, we ve been challenging the status quo of the consulting industry, serving up fresh, ingenious thinking through a radically lean structure. Together, this strategy delivers unprecedented performance at an unparalleled pace for faster results that propel your business forward.