Administrator - CyberArk PAM, DellOne TPAM

HCL Technologies Limited; Riyadh; On-site; SAR 180,000 - 260,000; Full time

Job summary

HCL Technologies Limited in Saudi Arabia is seeking an Administrator for CyberArk PAM and DellOne TPAM to design, implement, and maintain enterprise PAM solutions, ensuring secure management of privileged credentials.

You will provide L3 support for PAM incidents, develop policies, manage privileged accounts lifecycles, and integrate PAM with identity platforms while mentoring teammates and driving security compliance.

Qualifications

• Relevant certifications such as CISSP, CISM, BeyondTrust.
• Experience with DevSecOps practices and tools.
• Familiarity with cloud security and PAM solutions for cloud environments (AWS, Azure, GCP).
• Experience with implementing Just-In-Time (JIT) and Zero Trust access models.

Responsibilities

• Design, implement, and maintain enterprise PAM solutions ensuring secure management of privileged credentials and access.
• Provide L3 technical support for complex PAM incidents within the infrastructure.
• Develop and enforce PAM policies, procedures, and standards.
• Manage lifecycle of privileged accounts: provisioning, certification, deprovisioning.
• Implement and optimize PAM tools for session recording, vaulting, and rotation.
• Collaborate with cross-functional teams to integrate PAM with existing security tools.

Skills

PAM

CyberArk

Scripting

DevSecOps

MFA

Tools

CyberArk PAM

BeyondTrust

HashiCorp Vault

Thycotic Secret Server

DellOne TPAM

NetIQ PAM

Job description

Administrator - CyberArk PAM, DellOne TPAM Administrator - CyberArk PAM, DellOne TPAM Saudi Arabia

Key Responsibilities

• Design, implement, and maintain enterprise wide Beyond PAM solutions ensuring secure management of privileged credentials and access
• Provide L3 technical support for complex PAM-related incidents and problems within the infrastructure environment
• Develop and enforce PAM policies, procedures, and standards aligned with industry best practices and compliance requirements
• Manage the full lifecycle of privileged accounts, including provisioning, certification, and deprovisioning
• Implement and optimize PAM tools for session recording, credential vaulting, and automated password rotation
• Operation experience of Thales MFA and token management
• MFA Integration experience with ADFS for token management
• Beyond Trust password vault for saving complex password.
• Conduct regular security assessments and audits of privileged access controls
• Perform root cause analysis for security incidents related to privileged access
• Create and maintain documentation for PAM architecture, configurations, and operational procedures
• Collaborate with cross-functional teams to integrate PAM solutions with existing infrastructure and security tools
• Provide mentorship to junior team members on PAM best practices and troubleshooting techniques
• Work for security management in the domain and drive for compliance activities
• Provide Support For CyberArk Pam (Vault, Pvwa, Cpm & Psm) and Beyondtrust Privileged Identity by resolving on‑call escalations and performing root cause analysis to identify and mitigate recurring issues.
• Manage and maintain privileged access solutions using DellOne Tpam and Netiq Pam, ensuring compliance with quality standards and regulatory requirements.
• Conduct updates and management of the knowledge base, contributing to continuous improvement through documentation of solutions and best practices.
• Train and mentor new team members and analysts on PAM tools and processes, enhancing team capabilities and knowledge sharing.
• Independently resolve support tickets within agreed SLAs, ensuring timely responses and effective solutions to enhance customer experience and satisfaction.
• Strive for first call resolution and minimize case reopens by applying strong analytical skills and technical expertise in PAM tools and Rest APIs.

Preferred Qualifications

• Relevant certifications such as CISSP, CISM, BeyondTrust
• Experience with DevSecOps practices and tools
• Familiarity with cloud security and PAM solutions for cloud environments (AWS, Azure, GCP)
• Experience with implementing Just-In-Time (JIT) and Zero Trust access models
• Knowledge of threat detection and incident response processes
• Experience with automation and orchestration tools for security operations

Other Requirements

• PAM Platforms: CyberArk, BeyondTrust, HashiCorp Vault, Thycotic Secret Server
• Operating Systems: Windows Server, Linux (various distributions)
• Directory Services: Active Directory, LDAP
• Authentication: SAML, OAuth, MFA, PKI
• Networking: TCP/IP, firewalls, routing, VPN technologies
• Scripting: PowerShell, Python, Bash
• SIEM Tools: Splunk, QRadar, ArcSight or similar
• Infrastructure as Code: Terraform, Ansible