Senior PAM Engineer

Persistent Systems; Bengaluru; Hybrid; INR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Competitive salary and benefits

Hybrid work options

Education sponsorship for certs

Long Service awards

Group term life and Mediclaim

Job summary

Persistent Systems is seeking an experienced Senior Privileged Access Management (PAM) Engineer to design, implement, and support enterprise PAM solutions securing administrative accounts and enforcing robust access controls. The role collaborates with IAM, Security, Infrastructure and application teams across on-premises and cloud environments.

You will onboard privileged accounts, implement password vaulting, session monitoring, and just-in-time access controls, while driving best practices

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cyber Security, Engineering, or a related discipline.
• 8–12 years of experience in Privileged Access Management or related fields.
• Certifications such as CyberArk Defender/Guardian, CISSP, CISM, Security+, or Microsoft Security certifications are highly desirable.

Responsibilities

• Design, deploy, configure, and support enterprise PAM solutions across the organization.
• Implement PAM platform components, connectors, integrations, and security policies.
• Onboard privileged, shared, service, application, and administrative accounts into the PAM platform.
• Configure password vaulting, password rotation, credential checkout, and automated account management processes.
• Implement privileged session management, session recording, monitoring, and audit controls.
• Establish least-privilege access models and secure privilege elevation workflows.
• Integrate PAM solutions with Active Directory, cloud platforms, operating systems, databases, network devices, and enterprise applications.
• Investigate and resolve PAM platform issues, access-related incidents, and onboarding challenges.
• Automate repetitive PAM administration, account onboarding, and operational activities using scripting and automation tools.
• Partner with Cyber Security, IAM, Infrastructure, and Compliance teams to strengthen privileged access controls.
• Support internal and external audits by providing evidence, reports, and technical documentation.
• Develop operational runbooks, architecture documents, and standard operating procedures for PAM environments.
• Monitor platform health, capacity, and performance while recommending continuous improvements.

Skills

PAM engineering

CyberArk

BeyondTrust

Delinea

One Identity Safeguard

Active Directory

PowerShell

Python

REST APIs

Education

Bachelor’s degree in Computer Science / IT / Cyber Security / Engineering

Tools

PowerShell

Python

REST APIs

Job description

We are seeking an experienced Senior Privileged Access Management (PAM) Engineer to design, implement, and support enterprise-grade privileged access management solutions that secure administrative accounts and enforce robust access controls. The ideal candidate will play a critical role in protecting privileged credentials, reducing insider threats, ensuring regulatory compliance, and strengthening the organization’s overall security posture. You will collaborate with infrastructure, security, IAM, and application teams to deliver secure privileged access across on-premises and cloud environments.

• Experience: 8 to 12 Years
• Job Type: Full Time Employment

What You’ll Do:

• Design, deploy, configure, and support enterprise PAM solutions across the organization.
• Implement PAM platform components, connectors, integrations, and security policies.
• Onboard privileged, shared, service, application, and administrative accounts into the PAM platform.
• Configure password vaulting, password rotation, credential checkout, and automated account management processes.
• Implement privileged session management, session recording, monitoring, and audit controls.
• Establish least-privilege access models and secure privilege elevation workflows.
• Integrate PAM solutions with Active Directory, cloud platforms, operating systems, databases, network devices, and enterprise applications.
• Investigate and resolve PAM platform issues, access-related incidents, and onboarding challenges.
• Automate repetitive PAM administration, account onboarding, and operational activities using scripting and automation tools.
• Partner with Cyber Security, IAM, Infrastructure, and Compliance teams to strengthen privileged access controls.
• Support internal and external audits by providing evidence, reports, and technical documentation.
• Develop operational runbooks, architecture documents, and standard operating procedures for PAM environments.
• Monitor platform health, capacity, and performance while recommending continuous improvements.

Expertise You’ll Bring:

• 8 to 12 years of experience in Privileged Access Management, Identity & Access Management, or Cybersecurity Engineering.
• Strong hands-on experience with enterprise PAM platforms such as CyberArk, BeyondTrust, Delinea (Thycotic), One Identity Safeguard, or similar solutions.
• Deep understanding of privileged account lifecycle management, credential security, and access governance principles.
• Experience implementing password vaulting, session monitoring, privileged session recording, and just-in-time access controls.
• Strong knowledge of Active Directory, LDAP, Windows Server, Linux/Unix environments, databases, and cloud platforms.
• Experience integrating PAM solutions with enterprise applications, infrastructure systems, and security tools.
• Familiarity with security frameworks and compliance standards such as ISO 27001, NIST, CIS Controls, SOX, PCI-DSS, and GDPR.
• Experience automating onboarding, provisioning, and administration activities using PowerShell, Python, REST APIs, or similar technologies.
• Strong troubleshooting and problem-solving skills related to privileged access and authentication issues.
• Understanding of Zero Trust Security principles and privileged access risk management.
• Ability to work effectively with cross-functional security, infrastructure, and application teams.
• Excellent communication, stakeholder management, and documentation skills.
• Bachelor’s degree in Computer Science, Information Technology, Cyber Security, Engineering, or a related discipline.
• Relevant certifications such as CyberArk Defender/Guardian, BeyondTrust Certification, CISSP, CISM, Security+, or Microsoft Security certifications are highly desirable.
• Competitive salary and benefits package
• Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications
• Opportunity to work with cutting-edge technologies
• Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
• Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Values-Driven, People-Centric & Inclusive Work Environment:

Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

• We support hybrid work and flexible hours to fit diverse lifestyles.
• Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
• If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment

Let's unleash your full potential at Persistent - persistent.com/careers

"Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind."