CyberArk PAM Engineer

About the Company

Nagarro is a global digital engineering leader, known for delivering large scale data, cloud, and technology transformation programmes across financial services and other regulated industries. With a presence across 30+ countries, Nagarro partners with enterprise clients to drive meaningful, technology led change.

About the Role

We’re looking for an experienced CyberArk PAM Engineer to support a large-scale Privileged Access Management programme within a complex enterprise environment. This role is hands-on, focused on the implementation, optimisation and ongoing engineering of CyberArk, working closely with security, infrastructure and application teams.

Responsibilities

• Design, implement and configure CyberArk PAM solutions (PVWA, CPM, PSM, Vault)
• Onboard privileged accounts, applications and platforms into CyberArk
• Manage safe creation, policy configuration and access controls
• Develop and maintain session management and credential rotation policies
• Integrate CyberArk with target systems (Windows, Linux, databases, network devices)
• Support automation and onboarding at scale (scripts, APIs, bulk processes)
• Troubleshoot platform issues and drive performance/stability improvements
• Work with security teams to ensure alignment to IAM / PAM best practices
• Contribute to documentation, runbooks and operational handover

Qualifications

• Proven hands-on experience with CyberArk PAM (core components)

Required Skills

• Strong knowledge of: PVWA, CPM, PSM, Vault
• Privileged account onboarding and lifecycle
• Experience integrating CyberArk into: Windows & Active Directory, Linux/Unix environments, Cloud platforms (AWS, Azure preferred)
• Scripting/automation experience (PowerShell, Python or REST APIs)
• Good understanding of security frameworks and IAM principles
• Experience working in enterprise-scale environments

Preferred Skills

• Experienced with CyberArk upgrades / migrations
• Cloud-native PAM or hybrid environments
• DevOps / CI-CD integration for secret management
• CyberArk certifications (e.g. Defender, Sentry)
• Background in financial services or regulated environments

What Success Looks Like

• Smooth onboarding of privileged accounts and services
• Stable, secure CyberArk platform with minimal manual overhead
• Improved governance and visibility over privileged access