Senior Engineer - PAM

Prudential (Cambodia) Life Assurance; Bengaluru; On-site; INR 1,500,000 - 3,000,000; Full time

Job summary

Prudential (Cambodia) Life Assurance in Bengaluru, India seeks a PAM Engineer to implement and optimize the enterprise Privileged Access Management platform. You will work hands-on with CyberArk Vault, CPM, PSM, CCP, CP, and PTA, building integrations and automating workflows to deliver a secure, scalable PAM service.

The role requires 5–10 years of PAM experience, strong scripting skills, and the ability to collaborate across IAM, security, and operations teams.

Qualifications

• 5–10 years of hands-on PAM implementation and engineering in enterprise environments.
• Strong implementation and administration experience with CyberArk Vault, CPM, PSM, CCP, CP, and PTA.
• Experience developing custom CPM plugins and PSM connectors.
• Advanced scripting and automation skills (PowerShell, Python, REST APIs).

Responsibilities

• Design, implement, configure, and maintain CyberArk PAM solutions across enterprise environments.
• Develop, test, deploy, and support custom CPM plugins for password management and reconciliation.
• Develop, test, deploy, and support custom PSM connectors for secure privileged session access.
• Administer and support CyberArk Vault, CPM, PSM, CCP, CP, and PTA components.
• Plan and execute CyberArk platform upgrades, security patches, hotfixes, and lifecycle maintenance.
• Automate repetitive engineering and operational tasks using PowerShell, Python, REST APIs, or equivalent technologies.
• Build and support integrations between CyberArk and applications, servers, databases, network devices, cloud services, and DevOps platforms.

Skills

PAM engineering

CyberArk administration

IAM concepts

Privilege access

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

PowerShell

Python

REST APIs

CyberArk Vault

CPM

PSM

CCP

CP

PTA

Job description

Prudential's purpose is to be partners for every life and protectors for every future. Our purpose encourages everything we do by creating a culture in which diversity is celebrated and inclusion assured, for our people, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and we support our people's career ambitions. We pledge to make Prudential a place where you can Connect, Grow, and Succeed.

Job Profile

• Business Function: Group Information Security and Privacy


• Team: IAM - Privileged Access Management Engineering


• Job Title: PAM Engineer


• Reports to: PAM Manager


• Location: Bengaluru, India

Job description summary

The PAM Engineer will be responsible for the implementation, engineering, maintenance, and continuous improvement of the enterprise Privileged Access Management platform. The role will provide hands-on expertise across CyberArk Vault, Central Policy Manager (CPM), Privileged Session Manager (PSM), Central Credential Provider (CCP), Credential Provider (CP), and Privileged Threat Analytics (PTA). The engineer will develop custom integrations, maintain platform currency through upgrades and patching, automate repetitive activities, and work closely with the PAM Operations team to deliver a secure, stable, and scalable PAM service.

Key Responsibilities

• Design, implement, configure, and maintain CyberArk PAM solutions across enterprise environments.


• Develop, test, deploy, and support custom CPM plugins for password management and reconciliation use cases.


• Develop, test, deploy, and support custom PSM connectors for secure privileged session access.


• Administer and support CyberArk Vault, CPM, PSM, CCP, CP, and PTA components.


• Plan and execute CyberArk platform upgrades, security patches, hotfixes, and lifecycle maintenance activities.


• Automate repetitive engineering and operational tasks using PowerShell, Python, REST APIs, or equivalent technologies.


• Build and support integrations between CyberArk and applications, servers, databases, network devices, cloud services, and DevOps platforms.


• Troubleshoot complex platform, connector, authentication, password rotation, and privileged session issues.


• Perform root cause analysis and implement sustainable remediation for recurring incidents and platform defects.


• Partner with the PAM Operations team on onboarding, incident resolution, service improvements, knowledge transfer, and operational readiness.


• Coordinate technical changes with application, infrastructure, security, and change-management stakeholders.


• Maintain engineering standards, configuration records, technical documentation, and support runbooks.


• Contribute to platform resilience, disaster recovery testing, capacity planning, monitoring, and security compliance activities.

About You

• Hands-on engineer with strong ownership, analytical thinking, and a structured approach to problem solving.


• Able to work independently while collaborating effectively with engineering, operations, application, infrastructure, and security teams.


• Comfortable coordinating multiple technical activities and communicating clearly with both technical and non-technical stakeholders.


• Committed to continuous learning, service improvement, documentation, and knowledge sharing.

You and Our Values

• Ambitious - Improve PAM capabilities through practical engineering and automation.


• Curious - Continuously learn, investigate, and challenge existing approaches.


• Empathetic - Listen to stakeholder needs and support teams constructively.


• Courageous - Take ownership of complex technical issues and decisions.


• Nimble - Adapt effectively to changing priorities, technologies, and risks.

Experience and Expertise Needed

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent professional experience.


• 5 to 10 years of hands-on experience in PAM implementation, engineering, and platform support within enterprise environments.


• Strong implementation and administration experience with CyberArk Vault, CPM, PSM, CCP, CP, and PTA.


• Proven experience developing custom CPM plugins and PSM connectors.


• Experience with CyberArk platform upgrades, patching, migrations, hardening, health checks, and lifecycle management.


• Strong automation and scripting skills using PowerShell, Python, REST APIs, or equivalent technologies.


• Experience integrating PAM with Windows, Linux/Unix, databases, network devices, applications, cloud platforms, and DevOps toolchains.


• Good understanding of privileged account lifecycle management, authentication, password rotation, session isolation, secrets retrieval, and threat analytics.


• Experience supporting complex incidents, performing root cause analysis, and coordinating technical remediation with PAM Operations.


• Good understanding of IAM, cybersecurity principles, enterprise change management.