{"id":427874,"url":"https://alion.io/job/applied-materials-pam-and-secrets-management-engineer","title":"PAM and Secrets Management Engineer","company":{"id":3903,"name":"Applied Materials","domain":"appliedmaterials.com","url":"https://alion.io/company/amat","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":89,"open_postings":272,"ghost_share":0.004,"stale_share":0.423,"repost_share":0.007,"time_to_fill_p50_days":55,"computed_at":"2026-10-24T06:02:35Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":11500,"max_usd":33000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":31},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Bash","optional":false},{"name":"BeyondTrust","optional":false},{"name":"Bootstrap","optional":false},{"name":"CI/CD","optional":false},{"name":"CyberArk","optional":false},{"name":"Delinea","optional":false},{"name":"External Secrets","optional":false},{"name":"GCP","optional":false},{"name":"GitHub","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab","optional":false},{"name":"HashiCorp Vault","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"ITSM","optional":false},{"name":"JavaScript","optional":false},{"name":"Jenkins","optional":false},{"name":"Kubernetes","optional":false},{"name":"LDAP","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"PCI DSS","optional":false},{"name":"PKI","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"ServiceNow","optional":false},{"name":"Terraform","optional":false},{"name":"Unix","optional":false},{"name":"Vault","optional":false},{"name":"Windows","optional":false},{"name":"GDPR","optional":true},{"name":"HIPAA","optional":true},{"name":"MS SQL","optional":true},{"name":"MySQL","optional":true},{"name":"NIST CSF","optional":true},{"name":"Oracle","optional":true},{"name":"PostgreSQL","optional":true},{"name":"Prometheus","optional":true},{"name":"Sentry","optional":true},{"name":"Threat Modeling","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-08-21T00:00:00Z","employer_posted_date":"2026-08-21","last_verified_at":"2026-10-23T03:24:24Z","board_verified":true,"closed_at":null,"days_open":64,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":64},"description":"Who We Are\nApplied Materials is the global leader in materials science and engineering solutions that are at the foundation of virtually every new semiconductor chip and advanced display in the world. The equipment that we create and service is essential to advancing AI and accelerating the commercialization of next-generation semiconductor chips. Join us and push the boundaries of materials science and engineering in a company at the foundation of the electronics industry. The work we do together advances the world’s technology.\nWhat We Offer\nLocation:\nBangalore,INDYou’ll benefit from a supportive work culture that encourages you to learn, develop, and grow your career as you take on challenges and drive innovative solutions for our customers. We empower our team to push the boundaries of what is possible-while learning every day in a supportive leading global company. Visit our Careers website to learn more.\nAt Applied Materials, we care about the health and wellbeing of our employees. We’re committed to providing programs and support that encourage personal and professional growth and care for you at work, at home, or wherever you may go. Learn more about our benefits.\nAbout the Role\nJoin Applied Materials as a PAM & Secrets Management Engineer to lead privileged access management and secrets management initiatives across our global enterprise infrastructure. You'll architect and operate enterprise-scale PAM solutions (CyberArk) and HashiCorp Vault, working at the intersection of security, DevOps, and cloud platforms to protect critical systems and enable secure development.\nKey Responsibilities\nPrivileged Access Management (PAM)\nDesign, implement, and manage enterprise PAM solutions at scale (500+ concurrent sessions, 2K+ daily logins, 2.5K+ targets)\nOperate and maintain CyberArk self-hosted environment lead evaluation of alternatives (Delinea, BeyondTrust, CyberArk Privilege Cloud)\nArchitect privileged session management (PSM) for RDP, SSH with native client support and passwordless credential injection\nImplement automated account discovery and onboarding workflows (Windows local, AD, Linux/Unix accounts)\nConfigure session recording, monitoring, and alerting for compliance and security\nTroubleshoot and resolve PAM infrastructure stability issues (eliminating outages)\nSecrets Management\nArchitect and operate HashiCorp Vault Enterprise at scale across multi-cloud environments\nImplement Vault secrets engines: KV v2, Dynamic Secrets (LDAP, Azure, databases), PKI, Transit Encryption\nDesign and deploy Vault authentication methods: OIDC/JWT, Kubernetes, AppRole, AWS IAM, Azure AD\nConfigure Vault policies and namespaces for multi-tenant secret isolation\nIntegrate Vault with CI/CD pipelines (Jenkins, GitLab, GitHub Actions, Azure DevOps) for secure secret injection\nImplement Vault Agent and sidecar injectors for application secret delivery\nConfigure Vault auto-unseal with cloud KMS (AWS KMS, Azure Key Vault, GCP Cloud KMS)\nManage Vault high availability, disaster recovery, and performance tuning\nImplement secret rotation automation for databases, cloud credentials, and API keys\nCross-Functional Collaboration\nPartner with CI/CD, Network, Cloud, and Platform teams to integrate PAM/SM controls\nLead incident response for privileged access breaches and secrets exposure events\nConduct security assessments and ensure compliance with SOX, PCI-DSS, ISO 27001\nAutomate PAM and Secret Management workflows using Python, Bash, PowerShell, Terraform, Ansible\nRequired Qualifications\nPrivileged Access Management (PAM) Expertise:\n5+ years hands-on experience with enterprise PAM solutions at scale (10,000+ employees or global infrastructure)\nDeep experience with privileged session management: RDP, SSH session recording, monitoring, and credential injection\nStrong understanding of account lifecycle management: discovery, onboarding, rotation for Windows local, AD, Linux/Unix accounts\nExperience with PAM platforms: CyberArk (PAS, PVWA, CPM, PSM) or equivalent (BeyondTrust, Delinea, Arcon)\nKnowledge of least privilege principles and privilege elevation workflows\nExperience integrating PAM with approval workflows (ServiceNow, ITSM tools)\nUnderstanding of session isolation, credential vaulting, and password/SSH key rotation\nFamiliarity with PAM architecture: high availability, disaster recovery, horizontal scaling\nSecrets Management Expertise:\n3+ years hands-on experience with HashiCorp Vault in production environments\nDeep knowledge of Vault secrets engines: KV (v1/v2), Dynamic Secrets (databases, AWS, Azure), PKI, Transit, SSH, TOTP\nExperience with Vault authentication methods: Kubernetes, AppRole, OIDC/JWT, AWS IAM, Azure AD, LDAP, TLS Certificates\nStrong understanding of Vault policies, namespaces, and entity/identity management\nExperience with Vault Agent, sidecar injectors, and application integration patterns\nKnowledge of Vault operations: auto-unseal (HSM), replication (DR/Performance), backup/restore, upgrades\nExperience integrating Vault with CI/CD pipelines for dynamic secret injection\nUnderstanding of secret zero problem and secure secret bootstrap mechanisms\nTechnical & Cloud Skills:\nMulti-cloud secrets management: AWS Secrets Manager/IAM, Azure Key Vault/Managed Identity, GCP Secret Manager\nExperience with Kubernetes: Vault sidecar injection, CSI secret driver, external secrets operator\nProficiency in scripting and automation: Python, Bash, PowerShell, Go (preferred)\nExperience with Infrastructure-as-Code: Terraform, Ansible (Vault configuration automation)\nUnderstanding of PKI fundamentals: certificate lifecycle, CA hierarchies, mTLS, certificate-based authentication\nExperience with Directory services: Active Directory, LDAP (for PAM/Vault integration)\nCollaboration & Communication Skills:\nProven track record working with DevOps, Platform Engineering, Cloud, and Network teams\nStrong communication skills with technical and non-technical stakeholders\nAbility to lead cross-functional PAM/SM initiatives and provide technical mentorship\nExperience in incident response for privileged access and secret exposure events\nPreferred Qualifications (Advantages)\nCyberArk Certified: CyberArk Defender, Sentry, or Trustee certifications\nHands-on experience in Delinea Secret Server, BeyondTrust, Arcon, CyberArk Privilege Cloud\nExperience with account discovery automation and policy-based onboarding at scale\nHashiCorp Certified: Vault Associate or Vault Professional certification\nDeep knowledge of Vault database secrets engine: PostgreSQL, MySQL, MongoDB, MSSQL, Oracle dynamic credentials\nHands-on with Vault Transit engine: encryption-as-a-service, key derivation, convergent encryption\nExperience with Vault SSH secrets engine: signed SSH certificates, OTP SSH, CA-based SSH access\nExperience with Vault KMIP secrets engine for legacy application encryption key management\nExperience with Vault monitoring: metrics (Prometheus), logging, audit logs, performance tuning\nCertifications & Education:\nBachelor's degree in Computer Science, Information Security, or related field\nProfessional certifications: CyberArk CDE/Sentry, HashiCorp Vault Associate/Professional, CISSP, CISM, CISA, CEH\nCloud certifications: AWS Security Specialty, Azure Security Engineer, GCP Security Engineer\nCompliance & Architecture:\nDeep knowledge of compliance frameworks: SOX, PCI-DSS, NIST CSF, ISO 27001, GDPR, HIPAA\nExperience with zero-trust architecture and secrets management in zero-trust models\nUnderstanding of threat modeling for privileged access and secret exposure risks\nAdditional Information\nTime Type:\nFull timeEmployee Type:\nAssignee / RegularTravel:\nYes, 10% of the TimeRelocation Eligible:\nYesApplied Materials is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, national origin, citizenship, ancestry, religion, creed, sex, sexual orientation, gender identity, age, disability, veteran or military status, or any other basis prohibited by law.","description_format":"text","description_chars":8011,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":true,"industries":["Semiconductor Equipment"],"lifecycle":[{"event":"open","at":"2026-09-06T05:13:08Z"}],"visa":[],"liveness":{"score":35,"band":"fade","label":"Fading","p_open":1,"p_active":0.803,"p_room":0.44,"age_days":64,"expected_fill_days":55,"reasons":["conf:26","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-24T06:02:35Z"},"pay":null,"html_url":"https://alion.io/job/applied-materials-pam-and-secrets-management-engineer","json_url":"https://alion.io/job/applied-materials-pam-and-secrets-management-engineer.json","meta":{"generated_at":"2026-10-24T13:34:53Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19492,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3903},"rest":"https://alion.io/mcp/rest/get_company?id=3903"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fapplied-materials-pam-and-secrets-management-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fapplied-materials-pam-and-secrets-management-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fapplied-materials-pam-and-secrets-management-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/applied-materials-pam-and-secrets-management-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fapplied-materials-pam-and-secrets-management-engineer"}]}