Senior Engineer - Privileged Access Management

AmerisourceBergen; Pune District; On-site; INR 2,500,000 - 5,000,000; Full time

Job summary

Cencora in Pune is seeking a Senior Engineer – PAM to deliver large-scale Identity and Access Management initiatives. You will work on Privileged Access Management, secure credentials, session control, and Just-in-Time privilege models across on-prem and cloud resources.

You will engineer IAM tool suites (BeyondTrust, Azure Entra, AD, Linux) and build API integrations, scripts, and analytics to strengthen security and enable rapid growth. This is a full-time role based in Pune, India.

Qualifications

• 6+ years in IT and security with PAM focus.
• Experience designing deploying IAM/PAM at enterprise scale.
• Experience with listed BeyondTrust products and directory services.

Responsibilities

• Design and implement Privileged Access Management services.
• Manage privileged accounts and secure access to resources (on-prem and cloud).
• Develop API integrations and automation for identity infrastructure.
• Analyze logs and performance telemetry to diagnose issues.
• Validate upgrades and patches in non-production prior to release.
• Collaborate with cross-functional teams to test secure identity protocols.

Skills

Identity & Access Management

Privileged Access Management

BeyondTrust Password Safe

Azure Entra

Active Directory

PowerShell

MFA

SIEM

SSH Key Management

EPM

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

BeyondTrust Password Safe

BeyondTrust Endpoint Privilege Management

BeyondTrust Privileged Remote Access

SSH Key Management

MFA

Azure Entra

Active Directory

Linux

PowerShell scripts

Job description

Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere.

Job Details

Position Overview:

The Senior Engineer – PAM will deliver large and complex Identity and Access Management initiatives across the business with the goals of improving efficiency, increasing security posture, and supporting aggressive growth. The Senior Engineer will be expected to work in the Privileged Access Management space.

Key Responsibilities:

• Drive the design, implementation and engineering of Privileged Access Management Services which includes management of privileged accounts, secure access to Cencora resources (on premise and in the cloud), secure management of credentials, session management, zero standing privilege model, just-in-time privilege access and Identity & Access Analytics.
• Engineer and manage a variety of IAM-related product suites and tools to make critical operational and strategic decisions. Example products include: BeyondTrust Password Safe, BeyondTrust Endpoint Privilege Management (EPM), BeyondTrust Privileged Remote Access, SSH Key Management, MFA, SIEM, Azure Entra, Active Directory, Linux, PowerShell scripts.
• Innovate advanced API integrations and automation scripts to securely connect diverse, complex business applications to the centralized identity infrastructure.
• Analyze complex platform performance telemetry and authentication logs to accurately diagnose and troubleshoot recurring structural anomalies.
• Validate critical identity platform upgrades and security patches within non-production environments to ensure system stability prior to final release.
• Collaborate with cross-functional development teams to test and validate secure identity protocols for newly deployed large-scale enterprise solutions.

This job profile description is a standardized, non-contractual reference description and global reference tool provided for organizational consistency and talent architecture purposes across Cencora. It does not alter actual job duties, responsibilities, reporting lines, working conditions, grading, compensation, or other essential terms and conditions of employment. Actual duties and responsibilities may vary based on business needs, local requirements, and operational practices. Where a team members role is governed by an employment agreement, local terms and conditions, prior job description or collective bargaining agreement, those documents shall prevail in case of any inconsistency. Mandatory local laws shall also prevail.

Required Qualifications:

Certification in Information Security relevant areas such as Audit (CISA), Security Management (CISM), Security Professional (CISSP) and/or equivalent business experience in a matrix Organization required. Bachelors degree in computer science, information technology, cybersecurity, software engineering, or a related field, or equivalent experience. Typically requires 6+ years of combined IT and security work experience with a broad range of exposure to Identity and Access Management functions with a focus on Privileged Access Management and over 4 years’ experience designing and deploying Identity and Access Management solutions at the enterprise level. Experience designing, managing and supporting IAM and PAM products: BeyondTrust Password Safe, BeyondTrust Endpoint Privilege Management (EPM), BeyondTrust Privileged Remote Access, SSH Key Management, MFA, SIEM, Azure Entra, Active Directory, Linux, PowerShell scripts. Demonstrated successful implementation of security control frameworks and standards such as ISO 27001, ISO 17799, COBIT, ITIL, NIST and PCI.

What Cencora offers

Benefit offerings outside the US may vary by country and will be aligned to local market practice. The eligibility and effective date may differ for some benefits and for team members covered under collective bargaining agreements.

Full time

Affiliated Companies

Affiliated Companies: CENCORA BUSINESS SERVICES INDIA PRIVATE LIMITED

Equal Employment Opportunity

Cencora is committed to providing equal employment opportunity without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status or membership in any other class protected by federal, state or local law.

The company’s continued success depends on the full and effective utilization of qualified individuals. Therefore, harassment is prohibited and all matters related to recruiting, training, compensation, benefits, promotions and transfers comply with equal opportunity principles and are non-discriminatory.

Cencora is committed to providing reasonable accommodations to individuals with disabilities during the employment process which are consistent with legal requirements. If you wish to request an accommodation while seeking employment, please call 888.692.2272 or email [e-mail]. We will make accommodation determinations on a request-by-request basis. Messages and emails regarding anything other than accommodations requests will not be returned

Requirements: