Job Summary
Role: PAM Engineer / PAM Specialist
Experience: 5–8+ years
Domain: Cyber Security – Identity & Access Management
Role Objective
Responsible for implementation, administration and operational support of enterprise Privileged Access Management (PAM) solutions, ensuring privileged accounts are securely onboarded, governed, monitored and controlled.
Key Responsibilities
Key Responsibilities
- Implement, administer and support CyberArk PAM solutions.
- Manage Vault, PVWA, CPM, PSM, CCP/AIM and PSMP components.
- Discover and onboard privileged accounts including Windows Domain Admin, Linux/Unix root, database, service and application accounts.
- Onboard applications to Central Credential Provider (CCP) and eliminate hard-coded/service credentials where applicable.
- Configure automated password rotation, verification and reconciliation.
- Manage safes, platforms, policies, access permissions and privileged-account lifecycle.
- Configure and troubleshoot PSM privileged session monitoring/recording.
- Integrate PAM with Active Directory/LDAP and enterprise applications.
- Support privileged access across Windows, Linux/Unix, databases, network devices and cloud environments.
- Troubleshoot CPM/PSM/CCP connectivity, password rotation and account reconciliation issues.
- Support PAM upgrades, migrations, vulnerability remediation and platform health activities.
- Work with Cyber Security, Infrastructure, Application and IAM teams for account onboarding and access remediation.
- Handle incidents, service requests, changes and problem management through ServiceNow.
- Develop automation using PowerShell/Python/REST APIs for bulk onboarding and administration.
- Maintain PAM documentation, SOPs, runbooks and audit evidence.
- Ensure compliance with least privilege, RBAC, credential management and privileged-access governance requirements.
These areas also align with internal PAM experience identified around CyberArk CPM/PVWA/PSM/AIM/Conjur, BeyondTrust, AD/LDAP, RBAC, incident management and automation.
Skill Requirements
Mandatory Technical Skills
- CyberArk PAM
- CyberArk Vault, PVWA, CPM, PSM, CCP/AIM, PSMP
- Privileged and service-account onboarding
- Password rotation and reconciliation
- Active Directory / LDAP
- Windows & Linux/Unix administration fundamentals
- REST API / PowerShell / Python scripting
- ITSM / ServiceNow processes
- Strong troubleshooting and RCA capabilities
Other Requirements
Good to Have
- BeyondTrust / CA PAM
- CyberArk certification
- Azure/AWS privileged-access knowledge
- Ansible and CI/CD automation
- SSO, MFA and IAM integration experience
- Database and network-device PAM onboarding
Key Deliverables
Privileged Account Discovery → Account Onboarding → Password Vaulting & Rotation → Session Management → Application/CCP Integration → Access Governance → Audit & Compliance
For the current PAM scope, the most important emphasis should be CPC onboarding, CCP application onboarding, privileged-account discovery/clean-up, and standardisation of the privileged-account lifecycle