CyberArk Engineer – PAM, Vault, PVWA, CPM, PSM & PowerShell

Location: Gurugram, Hyderabad Eco Park

Time Type: Full time

Job Description

Job Summary

Synechron is seeking an experienced CyberArk Engineer with 4+ years of CyberArk administration and engineering experience to manage, enhance, and support the organization’s Privileged Access Management (PAM) platform. The role will focus on CyberArk implementation, privileged account onboarding, enterprise integrations, automation, platform maintenance, and operational support. This position contributes to business objectives by protecting privileged accounts, strengthening access controls, supporting compliance requirements, and reducing risks associated with unauthorized or unmanaged privileged access.

Software Requirements (Required and Preferred)

Required

• CyberArk Vault: Hands-on administration, configuration, support, and maintenance experience using the organization’s supported version.

• Password Vault Web Access (PVWA): Experience managing administrative access, user workflows, account access, and platform operations.

• Central Policy Manager (CPM): Experience configuring password policies, account management, password rotation, and reconciliation.

• Privileged Session Manager (PSM): Experience configuring, monitoring, and troubleshooting privileged sessions.

• Privileged Threat Analytics (PTA): Experience supporting privileged access monitoring, analytics, alerts, and investigation activities.

• Active Directory and LDAP: Experience integrating CyberArk with directory services and enterprise identity platforms.

• Windows Server and Linux Administration: Experience onboarding and supporting privileged accounts across Windows, Linux, and Unix environments.

• PowerShell and Scripting: Experience developing scripts for automation, administration, validation, and operational support.

• REST APIs and CyberArk APIs: Experience using APIs to support integrations, automation, account management, or monitoring activities.

• IAM and Security Tools: Practical understanding of identity and access management technologies, privileged access controls, authentication, authorization, and security operations.

• Defect, Incident, and Change Management Tools: Experience using approved tools to document incidents, service requests, changes, investigations, and operational activities.

Preferred

• CyberArk Endpoint Privilege Manager (EPM): Experience with administration, policy configuration, endpoint privilege controls, or support.

• Cloud Identity and Infrastructure Platforms: Experience integrating CyberArk with Azure, AWS, or GCP environments.

• Automation Tools: Exposure to automation frameworks, infrastructure automation, configuration management, or deployment tools.

• CyberArk Defender Certification: Preferred.

• CyberArk Sentry Certification: Preferred.

• CISSP, CISM, or Security+ Certification: Preferred.

• Security and Compliance Tools: Experience supporting audit, compliance, vulnerability management, security assessment, or privileged access review activities.

Overall Responsibilities

• Administer, configure, monitor, and support the CyberArk PAM platform, including Vault, PVWA, CPM, PSM, and PTA.

• Onboard privileged accounts, servers, applications, databases, network devices, cloud platforms, and other supported systems into CyberArk.

• Design and implement PAM solutions aligned with approved security standards, access control requirements, operational procedures, and compliance expectations.

• Configure password management, password rotation, reconciliation, session management, monitoring, alerting, and privileged account controls.

• Integrate CyberArk with Active Directory, LDAP, Azure AD, and other enterprise identity and access platforms.

• Develop automation scripts using PowerShell, Python, REST APIs, or CyberArk APIs to improve onboarding, validation, reporting, and operational efficiency.

• Perform CyberArk upgrades, patches, health checks, configuration reviews, maintenance, and platform optimization activities.

• Troubleshoot CyberArk platform issues and provide L2/L3 support within agreed service and response requirements.

• Collaborate with Security Operations, Infrastructure, Cloud, Application, Identity, and other technical teams to onboard systems and resolve access-related issues.

• Participate in incident response, privileged access investigations, session reviews, and remediation activities when required.

• Support audits, compliance reviews, security assessments, access certifications, and evidence collection.

• Create and maintain operational documentation, runbooks, standard operating procedures, knowledge articles, configuration records, and support procedures.

• Track platform health, onboarding progress, operational risks, defects, and improvement opportunities.

• Apply efficient and sustainable operational practices by reducing manual processing, reusing automation, and optimizing platform resources where applicable.

Technical Skills (By Category)

Programming Languages

Essential

• PowerShell scripting for CyberArk administration, account onboarding, validation, reporting, and operational automation.

• Basic Python scripting for automation, data processing, validation, monitoring, or support activities.

• Working knowledge of REST APIs and CyberArk APIs for integrations and automated operations.

• Ability to interpret scripts, API responses, configuration parameters, and platform logs.

Preferred

• Experience with additional scripting or automation languages used in enterprise infrastructure and security operations.

• Experience developing reusable automation utilities for large-scale account onboarding and platform administration.

Databases and Data Management

Essential

• Understanding of privileged account data, account ownership, platform assignments, safe or vault structures, access permissions, password policies, and reconciliation data.

• Ability to validate account inventories, onboarding information, access records, session data, and audit evidence.

• Experience onboarding databases and managing privileged database accounts through CyberArk.

• Understanding of data confidentiality, retention, integrity, and controlled access requirements.

Preferred

• Experience supporting database platforms in regulated or large enterprise environments.

• Exposure to reporting, dashboards, data extraction, or operational metrics related to PAM activities.

Cloud Technologies

Essential

• Experience onboarding or supporting privileged accounts and systems in cloud environments.

• Understanding of cloud identity, access, administrative accounts, service accounts, and privileged access risks.

• Experience working with at least one of Azure, AWS, or GCP environments.

Preferred

• Experience integrating CyberArk with cloud identity services, cloud infrastructure, virtual machines, applications, and platform services.

• Exposure to cloud-native security controls, secrets management, and privileged access governance.

Frameworks and Libraries

Essential

• CyberArk PAM platform capabilities, including Vault, PVWA, CPM, PSM, and PTA.

• Understanding of PAM principles, least-privilege access, password rotation, session isolation, session monitoring, account discovery, and access governance.

• Ability to configure platform policies, account management processes, authentication methods, access workflows, and monitoring controls.

Preferred

• CyberArk EPM administration, policy configuration, endpoint privilege management, or operational support.

• Exposure to identity governance, secrets management, privileged task automation, or related security frameworks.

Development Tools and Methodologies

Essential

• Experience with CyberArk implementation, administration, onboarding, integration, maintenance, and operational support.

• Experience performing platform upgrades, patches, health checks, troubleshooting, configuration reviews, and incident resolution.

• Experience using incident, change, problem, defect, and service management processes.

• Ability to create runbooks, operational procedures, knowledge articles, implementation records, and support documentation.

• Experience collaborating with infrastructure, cloud, application, identity, security operations, and audit teams.

Preferred

• Experience supporting CyberArk deployments in large enterprise environments.

• Exposure to Agile, IT service management, automation-led operations, or structured security engineering methodologies.

• Experience contributing to platform roadmaps, operational improvements, implementation planning, and service reporting.

Security Protocols

Essential

• Strong understanding of Privileged Access Management principles and security controls.

• Practical knowledge of least privilege, role-based access, separation of duties, account lifecycle management, password rotation, session monitoring, and privileged activity auditing.

• Experience with Active Directory, LDAP, Azure AD, authentication, authorization, and identity integrations.

• Knowledge of security standards and control frameworks, including ISO 27001, NIST, Essential Eight, and APRA CPS 234.

• Ability to support PCI-DSS requirements and privileged access governance controls.

• Understanding of incident response, privileged access investigations, audit evidence, access reviews, and remediation tracking.

Preferred

• Experience working in regulated environments, including Banking and Financial Services.

• Exposure to security assessments, control testing, compliance attestations, vulnerability remediation, and audit responses.

• Experience implementing enhanced monitoring and analytics for high-risk privileged accounts and sessions.

Experience Requirements

• Minimum 4 years of hands-on experience in CyberArk administration and engineering.

• Demonstrated experience administering and supporting CyberArk Vault, PVWA, CPM, PSM, and PTA.

• Experience onboarding Windows, Linux, Unix, databases, applications, network devices, and cloud platforms into CyberArk.

• Experience designing and implementing PAM solutions aligned with security standards, access governance requirements, and operational controls.

• Experience integrating CyberArk with Active Directory, LDAP, Azure AD, and other enterprise identity platforms.

• Experience using PowerShell, Python, REST APIs, or CyberArk APIs for automation and operational support.

• Experience performing CyberArk upgrades, patches, health checks, troubleshooting, maintenance, and L2/L3 support.

• Experience supporting audits, compliance activities, security assessments, incident response, and privileged access investigations.

• Banking or Financial Services experience is preferred, particularly experience with APRA CPS 234, PCI-DSS, and privileged access governance requirements.

• Candidates may qualify through equivalent experience in PAM engineering, IAM administration, security operations, or identity security roles where they can demonstrate comparable CyberArk implementation, onboarding, integration, and support outcomes.

Day-to-Day Activities

• Administer CyberArk Vault, PVWA, CPM, PSM, and PTA; onboard privileged accounts and systems; configure policies; and perform platform health checks.

• Collaborate with Security Operations, Infrastructure, Cloud, Application, and Identity teams to assess onboarding requirements, resolve access issues, and coordinate integrations.

• Develop PowerShell, Python, REST API, or CyberArk API automations; troubleshoot L2/L3 incidents; and support upgrades, patches, maintenance, and investigations.

• Maintain runbooks, knowledge articles, audit evidence, support records, and implementation deliverables while making operational decisions within approved PAM and security standards.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field; equivalent relevant professional experience may be considered.

• Minimum 4 years of professional experience in CyberArk administration and engineering, including implementation, onboarding, integration, and operational support.

• CyberArk Defender and CyberArk Sentry certifications are preferred; CISSP, CISM, or Security+ certifications are also preferred.

• Relevant training in CyberArk PAM, IAM, privileged access governance, security operations, scripting, cloud security, and applicable compliance standards is preferred.

• Commitment to continuous professional development through CyberArk platform updates, security training, certifications, compliance learning, and evolving PAM practices.

Professional Competencies

• Apply structured problem-solving and analytical skills to troubleshoot CyberArk issues, investigate privileged access activity, and identify sustainable resolutions.

• Collaborate effectively with Security Operations, Infrastructure, Cloud, Application, Identity, audit, and compliance teams to deliver secure access solutions.

• Communicate technical findings, risks, onboarding requirements, incidents, control gaps, and remediation activities clearly to relevant stakeholders.

• Adapt to changing CyberArk capabilities, enterprise architectures, cloud environments, security threats, compliance requirements, and operational priorities.

• Identify opportunities to improve PAM coverage, automation, monitoring, onboarding efficiency, control effectiveness, and responsible use of platform resources.

• Manage time and priorities across platform administration, onboarding, incident response, support activities, documentation, maintenance, audit requests, and delivery commitments.

CyberArk implementation, onboarding, and operational support experience within a large enterprise environment is highly desirable.

S​YNECHRON’S DIVERSITY & INCLUSION STATEMENT
 

Diversity & Inclusion are fundamental to our culture, and Synechron is proud to be an equal opportunity workplace and is an affirmative action employer. Our Diversity, Equity, and Inclusion (DEI) initiative ‘Same Difference’ is committed to fostering an inclusive culture – promoting equality, diversity and an environment that is respectful to all. We strongly believe that a diverse workforce helps build stronger, successful businesses as a global company. We encourage applicants from across diverse backgrounds, race, ethnicities, religion, age, marital status, gender, sexual orientations, or disabilities to apply. We empower our global workforce by offering flexible workplace arrangements, mentoring, internal mobility, learning and development programs, and more.

All employment decisions at Synechron are based on business needs, job requirements and individual qualifications, without regard to the applicant’s gender, gender identity, sexual orientation, race, ethnicity, disabled or veteran status, or any other characteristic protected by law.

Candidate Application Notice