Pam Engineer

Tata Consultancy Services; Dallas (TX); On-site; USD 90,000 - 110,000; Full time

Job summary

Tata Consultancy Services Limited is seeking an experienced PAM Engineer focused on CyberArk to design, implement, and support privileged access solutions across enterprise environments.

The role emphasizes onboarding critical systems, enforcing least privilege, and ensuring compliance with banking and security standards. Strong scripting and stakeholder management are required.

Qualifications

• 5+ years of experience in Cyber Security with at least 3+ years of CyberArk administration experience.
• Hands-on experience with CyberArk Vault, PVWA, CPM, PSM, PTA, and EPM.
• Experience with Windows and Linux server administration.
• Understanding of Identity & Access Management (IAM) concepts.
• Experience integrating CyberArk with Active Directory and MFA solutions.

Responsibilities

• Administer and maintain the CyberArk PAM platform.
• Onboard servers, databases, applications, and cloud platforms into CyberArk.
• Configure CyberArk components: Vault, PVWA, CPM, PSM, PTA, EPM.
• Support privileged account lifecycle management, password rotations, and reconciliation.

Skills

IAM concepts

Windows/Linux admin

PowerShell

Python

CyberArk knowledge

Troubleshooting

Education

Bachelor's degree in CS/InfoSec

CyberArk Defender/Sentry/Guardian

CISSP

Security+

AZ-500

Tools

CyberArk Vault

PVWA

CPM

PSM

PTA

EPM

Job description

Job Description

PAM Engineer - CyberArk

Must Have Technical/Functional Skills

• 8+ years of experience in Cyber Security with at least 3+ years of CyberArk administration experience.
• Strong hands-on experience with:
  • CyberArk Vault
  • PVWA (Password Vault Web Access)
  • CPM (Central Policy Manager)
  • PSM (Privileged Session Manager)
  • PTA (Privileged Threat Analytics)
  • EPM (Endpoint Privilege Manager)
• Experience with Windows and Linux server administration.
• Understanding of Identity & Access Management (IAM) concepts.
• Experience integrating CyberArk with Active Directory and MFA solutions.
• Knowledge of password management, privileged account governance, and security best practices.
• Experience with PowerShell, Python, or scripting for automation.
• Strong troubleshooting and stakeholder management skills.

Roles & Responsibilities

We are seeking an experienced CyberArk PAM Engineer to design, implement, administer, and support Privileged Access Management solutions across enterprise environments. The ideal candidate will be responsible for securing privileged accounts, onboarding critical systems, enforcing least privilege principles, and supporting cybersecurity compliance initiatives.

Key Responsibilities

• Administer and maintain the CyberArk Privileged Access Management (PAM) platform.
• Onboard servers, databases, applications, network devices, and cloud platforms into CyberArk.
• Configure and manage CyberArk components including Vault, PVWA, CPM, PSM, PTA, and EPM.
• Support privileged account lifecycle management, password rotations, account discovery, and reconciliation.
• Implement privileged session monitoring, recording, and auditing controls.
• Work with application teams to onboard service accounts and privileged credentials.
• Troubleshoot CyberArk-related issues and perform root cause analysis.
• Integrate CyberArk with Active Directory, LDAP, Azure AD (Entra ID), and MFA solutions.
• Support compliance requirements related to SOX, PCI-DSS, NIST, ISO 27001, and banking regulations.
• Perform health checks, upgrades, patching, and platform maintenance activities.
• Develop automation scripts for account onboarding, reporting, and operational tasks.
• Create operational runbooks, technical documentation, and knowledge articles.
• Participate in security audits and remediation activities.

Required Skills

• 5+ years of experience in Cyber Security with at least 3+ years of CyberArk administration experience.
• Strong hands-on experience with:
  • oCyberArk Vault
  • oPVWA (Password Vault Web Access)
  • oCPM (Central Policy Manager)
  • oPSM (Privileged Session Manager)
  • oPTA (Privileged Threat Analytics)
  • oEPM (Endpoint Privilege Manager)
• Experience with Windows and Linux server administration.
• Understanding of Identity & Access Management (IAM) concepts.
• Experience integrating CyberArk with Active Directory and MFA solutions.
• Knowledge of password management, privileged account governance, and security best practices.
• Experience with PowerShell, Python, or scripting for automation.
• Strong troubleshooting and stakeholder management skills.

Preferred Skills

• Experience with Azure, AWS, and cloud privileged access management.
• Experience with SailPoint, Saviynt, Okta, or Entra ID.
• Familiarity with ServiceNow integration.
• Knowledge of DevSecOps and Secrets Management.
• Experience with Kubernetes, Docker, and cloud-native security.
• Banking or Financial Services domain experience.

Key Technologies

• CyberArk PAM Suite
• CyberArk EPM
• CyberArk Secrets Manager
• Active Directory
• Microsoft Entra ID (Azure AD)
• LDAP
• ServiceNow
• PowerShell
• Python
• Windows Server
• Linux
• Azure / AWS

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field.
• Preferred Certifications:
  • oCyberArk Defender
  • oCyberArk Sentry
  • oCyberArk Guardian
  • oCISSP
  • oSecurity+
  • oAZ-500

Nice-to-Have Banking Experience

• Managing privileged access for banking and financial systems.
• Supporting regulatory audits and compliance reviews.
• Securing service accounts, admin accounts, and production environments.
• Implementing least-privilege and Zero Trust security controls.

Salary Range- $90,000-$110,000 a year

Location

Dallas, TX

Function

TECHNOLOGY

Role

Engineer

ID

433997

Skills

Cyberark

Salary Range

$90,000 - $110,000