Identity Engineer - Privilege Access

Accountabilities: Administer and support the CyberArk Privileged Cloud platform, including user and group management, safe administration, vault configuration, and PSM/CPM operations. Configure and enforce password, access, and workflow policies to support privileged account onboarding, credential rotation, and least-privilege access. Manage the full lifecycle of non-human identities, including service accounts, API keys, secrets, certificates, and machine or workload identities. Establish and maintain NHI governance processes covering identity discovery, ownership assignment, credential rotation, expiration monitoring, and decommissioning of unused or orphaned identities. Administer secrets management and vaulting solutions for applications, automation, and CI/CD pipelines, reducing hard-coded credentials and unnecessary standing privileged access. Troubleshoot PSM and CPM issues, including remote access connectivity through RDP, SSH, and web-based access, as well as privileged account management failures. Resolve complex network and connectivity issues involving firewall rules, NAT, DNS, and certificate chain validation affecting privileged and non-human access. Support authentication and authorization troubleshooting across Active Directory/LDAP, SAML, OAuth 2.0, MFA, and SSO integrations for privileged and service accounts. Develop PowerShell and Python scripts, leveraging REST APIs and CyberArk SDKs, to automate PAM and NHI onboarding, discovery, credential rotation, and reporting. Monitor and analyze CyberArk, system, and network logs, supporting SIEM integration, detection of unusual privileged or non-human activity, and incident response. Apply privileged access and NHI security best practices while supporting compliance with SOX, PCI-DSS, NIST, and ISO 27001 requirements. Collaborate with Security, Infrastructure, and Application teams to integrate PAM and NHI solutions across enterprise and operating company environments. Document technical procedures, configurations, and incident reports, and train application owners and DevOps teams on secure credential and machine identity practices. Develop reports and Power BI dashboards to track PAM and NHI performance, including credential rotation status, unmanaged or orphaned accounts, safe and vault utilization, and audit and compliance posture. Promote operational discipline, transparency, ownership, staff training, and continuous improvement to ensure identity management processes remain scalable, measurable, and repeatable. Requirements: Bachelor's degree recommended; equivalent professional experience will also be considered. More than 10 years of experience in cybersecurity, systems administration, or identity and access management, including at least 5 years of hands-on experience with CyberArk Privileged Cloud. Strong understanding of Privileged Access Security architecture, including Vault, PSM, CPM, and Cloud Entitlements Manager. Demonstrated experience managing non-human identities at scale, including service accounts, API keys, secrets managers, and machine or workload identities. Familiarity with secrets management tools and practices, such as CyberArk Conjur, Secrets Hub, HashiCorp Vault, or equivalent solutions, along with CI/CD credential security. Proficiency in TCP/IP networking, firewall administration, and DNS and certificate troubleshooting across on-premises and cloud environments, including AWS, Azure, and GCP. Experience with Active Directory/LDAP, Microsoft Entra ID, SAML, OAuth 2.0, MFA, and SSO authentication and authorization troubleshooting. Strong scripting skills in PowerShell and Python, with working knowledge of REST APIs and CyberArk SDKs. Experience with log analysis, SIEM integration, incident response, and root cause analysis, particularly involving privileged and non-human identity activity. Knowledge of security compliance frameworks, including SOX, PCI-DSS, NIST, and ISO 27001, as well as Zero Trust security principles. CyberArk Trustee certification or higher preferred; additional cloud platform or security certifications such as AWS, Azure, GCP, CISSP, CISM, or Security+ are advantageous. Strong communication and documentation skills, with the ability to explain technical concepts to non-technical stakeholders and train application owners and DevOps teams. Ability to work effectively across enterprise and operating company environments, balancing global standards with local business requirements and collaborating across multiple time zones and cultures. A proactive, collaborative approach aligned with continuous improvement, transparency, accountability, and ownership. Benefits: Full-time employment. Hybrid working arrangement in India. Opportunity to work with enterprise-scale privileged access and non-human identity security technologies. Exposure to CyberArk Privileged Cloud and secrets management solutions. Collaboration with global Security, Infrastructure, and Application teams. Opportunity to contribute to enterprise-wide cybersecurity, automation, and continuous improvement initiatives.