Job Description
Job Title: PAM CyberArk + BeyondTrust EPM
Experience: 7 - 11 Years
Location: Pune/Hyderabad/Bangalore/Chennai/Mumbai/Kolkata
Work Mode: Hybrid
Duration: 6 Months
Note: Apply only if your profile matches the mandatory skills and experience. Only relevant profiles will be shortlisted and considered for further evaluation.
Job Summary
We are seeking a highly experienced and certified Privileged Access Management PAM Architect with over 12 years of experience in cybersecurity The ideal candidate will possess deep expertise in both CyberArk and BeyondTrust platforms with a proven track record of designing architecting and executing PAM projects The candidate must have led successful migration projects from CyberArk Endpoint Privilege Manager EPM to BeyondTrust EPM and be certified in both technologies Strong communication skills and architectural thinking are essential for managing client relationships and delivering strategic PAM solutions
Key Responsibilities
Design architect and implement endtoend PAM solutions using CyberArk and BeyondTrust EPM
Lead CyberArk EPM to BeyondTrust EPM migration projects with full accountability for planning and execution
Engage with clients to understand business requirements and translate them into technical solutions
Develop PAM architecture documentation including highlevel and lowlevel designs
Ensure compliance with security standards and best practices
Provide strategic guidance and thought leadership in PAM initiatives
Mentor and guide junior team members and ensure knowledge transfer
Continuously evaluate emerging PAM technologies and recommend improvements
Required Skills Qualifications
10 years of experience in cybersecurity with a strong focus on Privileged Access Management
Expertise in CyberArk and BeyondTrust PAM and EPM solutions
Proven experience leading CyberArk EPM to BeyondTrust EPM migration projects
CyberArk and BeyondTrust certifications eg CyberArk SentryGuardian BeyondTrust CIE
Strong understanding of IAM least privilege principles and zero trust architecture
Experience with cloud platforms AWS Azure GCP and hybrid environments
Excellent communication and stakeholder management skills
Ability to think strategically and architect scalable PAM solutions
- Implement and configure BeyondTrust Endpoint Privilege Management (EPM) in enterprise environments.
• Deploy and manage EPM agents across Windows endpoints, VDI, and macOS platforms.
• Design and implement least privilege, privilege elevation, and application control policies.
• Support pilot, phased rollout, UAT, and production cutover activities.
• Collaborate with IAM, endpoint, and security teams during implementation and transition.
BAU / Run Operations
• Provide L2/L3 support for BeyondTrust EPM production environments.
• Handle incidents, service requests, rootcause analysis, and problem management.
• Perform regular health checks, upgrades, patching, and policy optimization.
• Maintain operational documentation including SOPs, runbooks, and KT artifacts.
• Support audit and compliance activities through reporting and evidence preparation.
• Strong handson experience with BeyondTrust Endpoint Privilege Management (EPM).
• Proven experience in EPM implementation and BAU support.
• Good understanding of least privilege, endpoint security, and privilege governance.
• Strong troubleshooting, communication, and documentation skills.
• Experience with CyberArk EPM or other PAM / EPM platforms.
• Scripting knowledge (PowerShell / Python).
• Exposure to ITSM, SIEM, and security compliance frameworks.
• BeyondTrust or PAMrelated certifications.
Preferred Qualifications
Experience with DevOps tools and secrets management solutions eg HashiCorp Vault Azure Key Vault
Familiarity with compliance frameworks such as ISO 27001 NIST and PCIDSS
Proficiency in scripting languages like PowerShell or Python for automation.
If Interested, please share your resume to the mail ID below:
prathika.shetty@cielhr.com
No Referrers Available
There are currently no referrers available for this job. You can still apply, will let you know once there is any referrer available.
