Senior PAM Engineer

Persistent; Bengaluru; On-site; INR 4,500,000 - 6,000,000; Full time

Benefits offered by this job

Competitive salary and benefits

Hybrid work culture

Career growth with certifications

Cutting-edge technologies

Employee engagement programs

Annual health check-ups

Insurance coverage: group term life

Personal accident insurance

Mediclaim hospitalization

Project parties

Long service awards

Job summary

Persistent is seeking an experienced Senior PAM Engineer to design, implement, and support enterprise-grade privileged access management solutions across on-prem and cloud environments. You will secure administrative accounts, enforce access controls, and collaborate across IAM, security, and infrastructure teams.

The role involves deploying PAM components, integrating with AD and cloud platforms, and automating common tasks with scripting.

Qualifications

• Bachelor's degree in a related field is required or equivalent practical experience.
• Desirable certifications: CyberArk Defender/Guardian, BeyondTrust Certification, CISSP, CISM, Security+, or Microsoft Security certifications.

Responsibilities

• Design, deploy, configure, and support enterprise PAM solutions across the organization.
• Implement PAM platform components, connectors, integrations, and security policies.
• Onboard privileged, shared, service, application, and administrative accounts into the PAM platform.
• Configure password vaulting, password rotation, credential checkout, and automated account management processes.
• Implement privileged session management, session recording, monitoring, and audit controls.
• Establish least-privilege access models and secure privilege elevation workflows.
• Integrate PAM with Active Directory, cloud platforms, OS, databases, network devices, and apps.
• Automate onboarding and admin tasks using scripting and automation tools.
• Collaborate with Cyber Security, IAM, Infrastructure, and Compliance teams to strengthen controls.
• Support audits with evidence, reports, and technical documentation.
• Develop runbooks, architecture docs, and SOPs for PAM environments.
• Monitor platform health, capacity, and performance; propose improvements.

Skills

Privileged Access Management

Identity & Access Management

Cybersecurity Engineering

CyberArk

BeyondTrust

Delinea (Thycotic)

One Identity Safeguard

Zero Trust

Scripting (PowerShell/Python)

Active Directory

Linux/Windows

Education

Bachelor's degree in Computer Science, Information Technology, Cyber Security, Engineering

Tools

CyberArk

BeyondTrust

Delinea (Thycotic)

One Identity Safeguard

Active Directory

Job description

About Position:

We are seeking an experienced Senior Privileged Access Management (PAM) Engineer to design, implement, and support enterprise-grade privileged access management solutions that secure administrative accounts and enforce robust access controls. The ideal candidate will play a critical role in protecting privileged credentials, reducing insider threats, ensuring regulatory compliance, and strengthening the organization's overall security posture. You will collaborate with infrastructure, security, IAM, and application teams to deliver secure privileged access across on-premises and cloud environments.

• Role: Senior PAM Engineer


• Location: Bengaluru


• Experience: 8 to 12 Years


• Job Type: Full Time Employment

What You'll Do:

• Design, deploy, configure, and support enterprise PAM solutions across the organization.


• Implement PAM platform components, connectors, integrations, and security policies.


• Onboard privileged, shared, service, application, and administrative accounts into the PAM platform.


• Configure password vaulting, password rotation, credential checkout, and automated account management processes.


• Implement privileged session management, session recording, monitoring, and audit controls.


• Establish least-privilege access models and secure privilege elevation workflows.


• Integrate PAM solutions with Active Directory, cloud platforms, operating systems, databases, network devices, and enterprise applications.


• Investigate and resolve PAM platform issues, access-related incidents, and onboarding challenges.


• Automate repetitive PAM administration, account onboarding, and operational activities using scripting and automation tools.


• Partner with Cyber Security, IAM, Infrastructure, and Compliance teams to strengthen privileged access controls.


• Support internal and external audits by providing evidence, reports, and technical documentation.


• Develop operational runbooks, architecture documents, and standard operating procedures for PAM environments.


• Monitor platform health, capacity, and performance while recommending continuous improvements.

Expertise You'll Bring:

• 8 to 12 years of experience in Privileged Access Management, Identity & Access Management, or Cybersecurity Engineering.


• Strong hands-on experience with enterprise PAM platforms such as CyberArk, BeyondTrust, Delinea (Thycotic), One Identity Safeguard, or similar solutions.


• Deep understanding of privileged account lifecycle management, credential security, and access governance principles.


• Experience implementing password vaulting, session monitoring, privileged session recording, and just-in-time access controls.


• Strong knowledge of Active Directory, LDAP, Windows Server, Linux/Unix environments, databases, and cloud platforms.


• Experience integrating PAM solutions with enterprise applications, infrastructure systems, and security tools.


• Familiarity with security frameworks and compliance standards such as ISO 27001, NIST, CIS Controls, SOX, PCI-DSS, and GDPR.


• Experience automating onboarding, provisioning, and administration activities using PowerShell, Python, REST APIs, or similar technologies.


• Strong troubleshooting and problem-solving skills related to privileged access and authentication issues.


• Understanding of Zero Trust Security principles and privileged access risk management.


• Ability to work effectively with cross-functional security, infrastructure, and application teams.


• Excellent communication, stakeholder management, and documentation skills.


• Bachelor's degree in Computer Science, Information Technology, Cyber Security, Engineering, or a related discipline.


• Relevant certifications such as CyberArk Defender/Guardian, BeyondTrust Certification, CISSP, CISM, Security+, or Microsoft Security certifications are highly desirable.

Benefits:

• Competitive salary and benefits package


• Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications


• Opportunity to work with cutting-edge technologies


• Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards


• Annual health check-ups


• Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Values-Driven, People-Centric & Inclusive Work Environment:

Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

• We support hybrid work and flexible hours to fit diverse lifestyles.


• Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.


• If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment

Let's unleash your full potential at Persistent-persistent.com/careers

\"Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind.\"