METRO

Senior PAM Engineer (10+ yrs experience)

Pune, India · Hybrid · Full-time

Apply on the employer’s site ↗See how well you match this job

You apply directly with the employer. ROLIVA does not submit applications from this page and is not the employer.

About the role

Description from the employer’s posting. Check the employer’s page for the current version.

EmployerMETRO
LocationPune, India
Work styleHybrid
Employment typeFull-time
Employer posted1 month ago

Senior CyberArk Lead / SME – PAM Architecture, PCloud, EPM, CCP & Conjur

Location:

Pune, India (Onsite)

Experience:

9–12 years total experience with minimum 7+ years deep CyberArk experience.

Mandatory Certifications:

CyberArk CDE (preferred)
CyberArk Sentry (preferred)
Defender preferred

About the Role

We are seeking a Senior CyberArk SME / Lead Engineer to own design, governance, delivery, optimization, and strategic roadmap of CyberArk Privilege Cloud, EPM, CCP, and Conjur platforms. This role will lead engineering teams, stakeholders, vendors, and transformation programs across enterprise PAM.

Key Responsibilities

Own CyberArk architecture, engineering standards, and operational governance.
Lead enterprise rollout of Privilege Cloud, EPM, CCP, and Conjur.
Design scalable PAM solutions for infrastructure, applications, cloud, DevOps, and endpoints.
Lead onboarding factory for servers, databases, service accounts, application accounts, and cloud admins.
Design and govern CyberArk PSM connector framework for web applications, enterprise applications, legacy applications, and custom launch workflows.
Lead development standards for custom connectors/plugins and secure application access through CyberArk.
Define PAM operating model, RBAC, SoD, access recertification, break-glass processes.
Lead secrets management strategy for CI/CD pipelines, containers, Kubernetes, and machine identities.
Architect integrations with Entra ID, Azure, AWS, ServiceNow, SIEM, ITSM, DevOps platforms.
Drive reduction of show/copy password usage and movement to brokered access models.
Lead DR, HA design, resiliency planning, and performance optimization.
Manage escalations, incidents, root cause reviews, and platform stability.
Lead audits, compliance remediation, and regulatory evidence management.
Mentor engineers and establish CyberArk best practices.

Show full description

Mandatory Technical Skills

Expert in CyberArk Privilege Cloud
Expert in CyberArk EPM
Strong CCP implementation experience
Strong Conjur implementation experience
Strong PSM connector / plugin development expertise
Secrets management for CI/CD pipelines
PAM architecture and governance
PowerShell / Python / REST APIs
Cloud security integrations
Linux / Windows / Database PAM

Nice to Have

Browser automation / web access connector design
Kubernetes / OpenShift
Zero Trust / JIT models
Identity integrations
Product ownership experience

See how well you match this job Apply on the employer’s site ↗

Check your resume against this job Free, no sign-up. Nothing you paste is stored.

Staying safe while you apply

Never pay to apply, interview or accept an offer. ROLIVA never asks you for payment to apply to a job.
Apply only through the official “Apply on the employer’s site” button, on the employer’s own site, and check that a recruiter’s email uses that employer’s own domain rather than a free email address.
Be cautious of an offer made with no real interview, or pressure to decide quickly or share financial details early.

Does something look wrong with this listing? Use “Report broken link” in the role details, or read ROLIVA’s full job-safety guidance ↗.

Preparing for this role with ROLIVA

Check the fit.
Compare the requirements with the experience you have confirmed, including gaps.
Prepare honestly.
Build interview stories and application drafts from your own evidence.
Keep track.
Save the role and record your own application status and follow-ups.

Create a free workspace or log in.