{"id":1252945,"url":"https://alion.io/job/bridge-soft-solutions-cyberark-pam-engineer","title":"CyberArk PAM Engineer","company":{"id":3806699,"name":"Bridge Soft Solutions","domain":"bridgesoft.com","url":"https://alion.io/company/bridge-soft-solutions","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":12000,"max_usd":31000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":20},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"CyberArk","optional":false},{"name":"ITSM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Unix","optional":false},{"name":"Windows","optional":false},{"name":"IAM","optional":true},{"name":"Sentry","optional":true},{"name":"ServiceNow","optional":true},{"name":"SIEM","optional":true}],"status":"live","first_seen_at":"2026-09-11T11:31:00Z","employer_posted_date":null,"last_verified_at":"2026-09-11T11:31:00Z","board_verified":false,"closed_at":null,"days_open":32,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":32},"description":"CyberArk PAM - L3/L4\n\nPosition Overview : \n\nPosition : CyberArk PAM L3/L4 Engineer\n\nExperience : Senior-level CyberArk PAM administration and support experience\n\nCore Platform : CyberArk Vault, CPM, PVWA, PSM/PSMP, PTA; AAM/Conjur and EPM where applicable\n\nJob Summary : \n\nWe are looking for an experienced CyberArk PAM L3/L4 Engineer to support the administration, monitoring, troubleshooting, configuration, incident resolution, and continuous improvement of a CyberArk Privileged Access Management environment. The role will handle advanced L3 issues and, at L4 level, architecture-level troubleshooting, upgrades, complex root-cause analysis, vendor escalation, and technical governance.\n\nKey Responsibilities : \n\n- Administer, monitor, troubleshoot, and maintain CyberArk PAM components including Digital Vault, CPM, PVWA, PSM/PSMP, and PTA.\n\n- Manage privileged accounts, safes, platforms, policies, and the complete account lifecycle.\n\n- Perform advanced troubleshooting for issues escalated from L1/L2 support.\n\n- Investigate and resolve failed password/SSH key rotations, reconciliations, and account onboarding issues.\n\n- Perform safe, platform, and account configuration and policy tuning.\n\n- Coordinate with Windows, Unix/Linux, database, network, and application teams for target-system onboarding and access issues.\n\n- Execute approved configuration changes, patches, and upgrades across non-production and production environments.\n\n- Conduct health checks, performance monitoring, capacity assessment, and log management.\n\n- Perform root-cause analysis for recurring and complex incidents and track preventive actions.\n\n- Support audits, compliance reviews, access certification, and privileged-access recertification.\n\n- Maintain runbooks, SOPs, knowledge articles, and technical documentation.\n\n- Participate in change management and CAB activities for PAM-related changes.\n\n- At L4 level, troubleshoot HA/DR and Vault replication issues and provide architecture-level technical guidance.\n\n- Design and review platform upgrades, patches, configuration changes, and security-hardening recommendations.\n\n- Own complex RCAs involving multiple CyberArk components and coordinate with CyberArk vendor support/TAM.\n\n- Provide governance input on policy standards, naming conventions, safe design, and least-privilege models.\n\n- Mentor L1/L2 resources and provide technical oversight and quality review of L3 deliverables.\n\nRequired Technical Skills : \n\n- Hands-on experience administering CyberArk PAM, including Vault, CPM, PVWA, and PSM/PSMP.\n\n- Strong understanding of privileged account onboarding, safes, platforms, password management, rotation, and reconciliation.\n\n- Experience with CyberArk PTA; exposure to AAM/Conjur and EPM is an advantage.\n\n- Strong knowledge of Windows and Unix/Linux administration.\n\n- Good understanding of Active Directory and networking fundamentals including ports, certificates, and load balancers.\n\n- Experience with ITSM processes covering incident, problem, and change management.\n\n- Strong troubleshooting and root-cause analysis skills for complex PAM issues.\n\n- Knowledge of security principles such as least privilege, credential lifecycle, session isolation, audit, and compliance.\n\n- PowerShell or Python scripting knowledge for automation and reporting is desirable, particularly for L4 roles.\n\nPreferred Certification : \n\nCyberArk Defender / Sentry certification preferred, at a level appropriate to the L3 or L4 role.\n\nL3 vs. L4 Scope : \n\n- Troubleshooting : Advanced troubleshooting of Vault, CPM, PVWA, PSM and non-standard issues - Architecture-level troubleshooting, including HA/DR and Vault replication\n\n- Changes & Upgrades : Execute approved configuration changes, patches and upgrades - Design/review upgrades, patches and complex configuration changes before rollout\n\n- Integrations / Environment : Active Directory, SIEM, ServiceNow / ITSM, Windows and Unix/Linux target systems, Databases and network devices, Cloud IAM environments\n\nKey Deliverables : \n\n- Resolution of L3/L4 incidents and tickets within agreed SLAs.\n\n- CyberArk Vault/CPM/PVWA/PSM health-check reporting.\n\n- RCA documentation for major incidents.\n\n- Support for periodic privileged-access reviews and recertification.\n\n- Documented and CAB-approved change records.\n\n- Updated runbooks, SOPs, and knowledge-base documentation.\n\nRole Expectations : \n\n- Strong ownership of complex CyberArk incidents from investigation through resolution.\n\n- Ability to work collaboratively with application, infrastructure, security, and PAM teams.\n\n- Ability to communicate technical issues and RCA findings clearly.\n\n- Willingness to support planned after-hours/weekend changes when scheduled in advance.\n\n- Ability to mentor junior support resources and contribute to operational improvements.\nSkills\nCyberArk, CyberArk PAM, IT Security Strategy, Security Protocols, Security Tools, Security Administration, Active Directory, ITSM, Security Configuration, Security Monitoring Tools","description_format":"text","description_chars":5007,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-09-25T18:04:06Z"}],"visa":[],"liveness":{"score":19,"band":"cold","label":"Long shot","p_open":0.6,"p_active":0.579,"p_room":0.55,"age_days":31,"expected_fill_days":22,"reasons":["seen:31","win:tail"],"computed_at":"2026-10-13T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/bridge-soft-solutions-cyberark-pam-engineer","json_url":"https://alion.io/job/bridge-soft-solutions-cyberark-pam-engineer.json","meta":{"generated_at":"2026-10-13T19:43:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":30201,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3806699},"rest":"https://alion.io/mcp/rest/get_company?id=3806699"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbridge-soft-solutions-cyberark-pam-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbridge-soft-solutions-cyberark-pam-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbridge-soft-solutions-cyberark-pam-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bridge-soft-solutions-cyberark-pam-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbridge-soft-solutions-cyberark-pam-engineer"}]}