Senior Engineer - PAM

Prudential’s purpose is to be partners for every life and protectors for every future. Our purpose encourages everything we do by creating a culture in which diversity is celebrated and inclusion assured, for our people, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and we support our people’s career ambitions. We pledge to make Prudential a place where you can Connect, Grow, and Succeed.

Job Profile

Business Function:

Group Information Security and Privacy

Team:

IAM - Privileged Access Management Engineering

Job Title:

PAM Engineer

Reports to:

PAM Manager

Location:

Bengaluru, India

Job description summary

The PAM Engineer will be responsible for the implementation, engineering, maintenance, and continuous improvement of the enterprise Privileged Access Management platform. The role will provide hands-on expertise across CyberArk Vault, Central Policy Manager (CPM), Privileged Session Manager (PSM), Central Credential Provider (CCP), Credential Provider (CP), and Privileged Threat Analytics (PTA). The engineer will develop custom integrations, maintain platform currency through upgrades and patching, automate repetitive activities, and work closely with the PAM Operations team to deliver a secure, stable, and scalable PAM service.

Key Responsibilities

• Design, implement, configure, and maintain CyberArk PAM solutions across enterprise environments.
• Develop, test, deploy, and support custom CPM plugins for password management and reconciliation use cases.
• Develop, test, deploy, and support custom PSM connectors for secure privileged session access.
• Administer and support CyberArk Vault, CPM, PSM, CCP, CP, and PTA components.
• Plan and execute CyberArk platform upgrades, security patches, hotfixes, and lifecycle maintenance activities.
• Automate repetitive engineering and operational tasks using PowerShell, Python, REST APIs, or equivalent technologies.
• Build and support integrations between CyberArk and applications, servers, databases, network devices, cloud services, and DevOps platforms.
• Troubleshoot complex platform, connector, authentication, password rotation, and privileged session issues.
• Perform root cause analysis and implement sustainable remediation for recurring incidents and platform defects.
• Partner with the PAM Operations team on onboarding, incident resolution, service improvements, knowledge transfer, and operational readiness.
• Coordinate technical changes with application, infrastructure, security, and change-management stakeholders.
• Maintain engineering standards, configuration records, technical documentation, and support runbooks.
• Contribute to platform resilience, disaster recovery testing, capacity planning, monitoring, and security compliance activities.

About You

• Hands-on engineer with strong ownership, analytical thinking, and a structured approach to problem solving.
• Able to work independently while collaborating effectively with engineering, operations, application, infrastructure, and security teams.
• Comfortable coordinating multiple technical activities and communicating clearly with both technical and non-technical stakeholders.
• Committed to continuous learning, service improvement, documentation, and knowledge sharing.

You and Our Values

You exemplify our core values in the following ways:

Ambitious - Improve PAM capabilities through practical engineering and automation.

Curious - Continuously learn, investigate, and challenge existing approaches.

Empathetic - Listen to stakeholder needs and support teams constructively.

Courageous - Take ownership of complex technical issues and decisions.

Nimble - Adapt effectively to changing priorities, technologies, and risks.

Experience and Expertise Needed

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent professional experience.
• 5 to 10 years of hands-on experience in PAM implementation, engineering, and platform support within enterprise environments.
• Strong implementation and administration experience with CyberArk Vault, CPM, PSM, CCP, CP, and PTA.
• Proven experience developing custom CPM plugins and PSM connectors.
• Experience with CyberArk platform upgrades, patching, migrations, hardening, health checks, and lifecycle management.
• Strong automation and scripting skills using PowerShell, Python, REST APIs, or equivalent technologies.
• Experience integrating PAM with Windows, Linux/Unix, databases, network devices, applications, cloud platforms, and DevOps toolchains.
• Good understanding of privileged account lifecycle management, authentication, password rotation, session isolation, secrets retrieval, and threat analytics.
• Experience supporting complex incidents, performing root cause analysis, and coordinating technical remediation with PAM Operations.
• Good understanding of IAM, cybersecurity principles, enterprise change management, and security control requirements.
• Strong written and verbal communication, stakeholder management, and cross-team coordination skills.
• Ability to manage competing priorities, work independently, and deliver engineering activities through to completion.
• CyberArk certification such as CDE, Sentry, or equivalent is preferred.
• Experience with Azure, AWS, or GCP and integration with ServiceNow or CI/CD platforms is an advantage.

Prudential is an equal opportunity employer. We provide equality of opportunity of benefits for all who apply and who perform work for our organisation irrespective of sex, race, age, ethnic origin, educational, social and cultural background, marital status, pregnancy and maternity, religion or belief, disability or part-time / fixed-term work, or any other status protected by applicable law. We encourage the same standards from our recruitment and third-party suppliers taking into account the context of grade, job and location. We also allow for reasonable adjustments to support people with individual physical or mental health requirements.