PAM Security Engineer

OP; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

OP is seeking a Security Engineer - PAM to join our Global Information Security IAM group. The role focuses on managing enterprise PAM solutions, implementing privileged access controls, and automating onboarding and provisioning tasks.

You will work with CyberArk/CA PAM and collaborate with IT teams to ensure policy compliance, perform audits, and contribute to root cause analysis and documentation. A strong foundation in IAM and scripting is required.

Qualifications

• 3+ years of experience in cybersecurity, IT operations, or identity and access management.
• Foundational PAM concepts: credential vaulting, session recording, least privilege, and secrets management.
• Familiarity with enterprise PAM platforms such as CyberArk or CA PAM (Broadcom Privileged Access Manager).
• Basic scripting ability in PowerShell and/or Python for task automation.
• Understanding of Active Directory, LDAP, and enterprise identity concepts.
• Familiarity with compliance and audit processes in an IT security context (SOX, PCI-DSS, or similar).
• Ability to work effectively within cross-functional teams and follow structured engineering processes.

Responsibilities

• Support the implementation and maintenance of enterprise PAM solutions including privileged account vaulting, session management, and credential rotation.
• Administer and operate PAM platforms (e.g., CyberArk, CA PAM) under supervision, ensuring policies are applied.
• Assist with automation tasks for PAM onboarding, account provisioning, and reconciliation using PowerShell, Python, or REST APIs.
• Collaborate with IT and application teams to support PAM integrations following established patterns.
• Apply privileged account policies and support access reviews and audit evidence collection.
• Troubleshoot PAM platform issues and contribute to root cause analysis and documentation.
• Maintain team documentation, runbooks, and knowledge base articles.
• Identify opportunities to reduce privileged access attack surface through tooling and process improvements.

Skills

Cybersecurity

Identity and Access Management

PAM concepts

CyberArk/CA PAM

PowerShell/Python

Active Directory/LDAP

Compliance/audit

Cross-functional collaboration

Education

Bachelors in CS/IS/Software/Engineering

Job description

We are looking for a Security Engineer - PAM to join our Global Information Security - Identity and Access Management (IAM) group. This group is responsible for providing a Core IAM ecosystem of products and platforms in use across the company by cast members, employees, and partners within our business segments and corporate functions. Our vision is to provide modern Identity and Access Management capabilities and services that are simple, seamless, and secure to protect our workforce, our data, and our brands.

What You Ll Do

• Support the implementation and maintenance of enterprise PAM solutions including privileged account vaulting,
• session management, and credential rotation.
• Administer and operate PAM platforms (e.g., "CyberArk, CA PAM") under the direction of senior engineers, ensuring platform policies are correctly applied.
• Assist with automation tasks for PAM onboarding, account provisioning, and reconciliation using PowerShell, Python, or REST APIs.
• Collaborate with IT and application teams to support PAM integrations, following established patterns and design guidance.
• Apply and maintain privileged account policies aligned with TWDC security standards and documented procedures. Support PAM-related access reviews and assist in gathering audit evidence as directed.
• Troubleshoot PAM platform issues with guidance from senior engineers, contributing to root cause analysis and documentation.
• Maintain team documentation, runbooks, and knowledge base articles based on operational experience.
• Identify and elevate opportunities to reduce the privileged access attack surface through improved tooling and process improvements.

Required Qualifications & Skills

• 3+ years of experience in cybersecurity, IT operations, or identity and access management.
• Foundational knowledge of PAM concepts: credential vaulting, session recording, just-in-time access, least privilege, and secrets management.
• Familiarity with enterprise PAM platforms such as CyberArk or CA PAM (Broadcom Privileged Access Manager).
• Basic scripting ability in PowerShell and/or Python for task automation.
• Understanding of Active Directory, LDAP, and enterprise identity concepts.
• Familiarity with compliance and audit processes in an IT security context (SOX, PCI-DSS, or similar frameworks).
• Ability to work effectively within cross-functional teams and follow structured engineering processes.

Preferred Qualifications

• Experience with DevOps secrets management tools such as HashiCorp Vault, AWS Secrets Manager, or Azure Key Vault.
• Familiarity with Infrastructure as Code (Terraform) for platform deployment and configuration.
• Exposure to SIEM integrations and PAM telemetry for privileged session monitoring.
• Knowledge of Zero Trust architecture principles as applied to privileged access.
• Relevant certifications such as: CyberArk Defender, CompTIA Security+, or equivalent are a plus.
• Master s degree in Information Technology, Information Security, Computer Science, or Business related field or equivalent validated work experience.

Required Education

• Bachelor s degree in Computer Science, Information Systems, Software, Electrical or Electronics Engineering, or comparable field of study, and/or equivalent work experience.

Additional Responsibilities

• Participate in OP monthly team meetings and participate in team-building efforts.
• Contribute to OP technical discussions, peer reviews, etc.
• Contribute content and collaborate via the OP-Wiki/Knowledge Base.
• Provide status reports to OP Account Management as requested.

About Us

At OP, we help you harness the power of technology for maximum impact. A technology consulting and solutions company, we offer advisory and managed services, innovative platforms, and staffing solutions across a wide range of fields including AI, cybersecurity, enterprise architecture, and beyond. For nearly two decades, we ve been challenging the status quo of the consulting industry, serving up fresh, ingenious thinking through a radically lean structure. Together, this strategy delivers unprecedented performance at an unparalleled pace for faster results that propel your business forward.