SME OKTA, CyberArk PAM

Job description

8+ years of experience in operations OR deployment & implementation of Privileged Access Management using CyberArk solution for large scale customers across various industry verticals. General Description Serve as an SME responsible for the implementation, administration, support, and optimization of BeyondTrust PAM and HashiCorp Vault solutions across enterprise environments. Manage privileged access, endpoint privilege controls, and secrets management services, ensuring secure access to critical systems, applications, and infrastructure. Collaborate with infrastructure, security, IAM, cloud, and DevOps teams to support integrations, onboarding activities, automation initiatives, upgrades, and platform enhancements. Key Responsibilities General Description Serve as an SME responsible for the implementation, administration, support, and optimization of BeyondTrust PAM and HashiCorp Vault solutions across enterprise environments. Manage privileged access, endpoint privilege controls, and secrets management services, ensuring secure access to critical systems, applications, and infrastructure. Collaborate with infrastructure, security, IAM, cloud, and DevOps teams to support integrations, onboarding activities, automation initiatives, upgrades, and platform enhancements. Skill Requirements Hands-on experience with BeyondTrust PAM solutions and HashiCorp Vault, including implementation, administration, support, and operational management. Experience in implementing and supporting Privileged Access Management (PAM), Endpoint Privilege Management (EPM), and Secrets Management solutions using BeyondTrust and HashiCorp technologies. Strong knowledge of BeyondTrust Password Safe, Privileged Remote Access (PRA), Endpoint Privilege Management (EPM) and HashiCorp Vault architecture, secret engines, authentication methods, policies, and access control mechanisms. Experience in installing, configuring, upgrading, maintaining, and troubleshooting BeyondTrust and HashiCorp Vault environments in enterprise-scale deployments. Hands-on experience integrating BeyondTrust and HashiCorp Vault with Windows, UNIX/Linux servers, databases, network devices, cloud platforms, containers, Kubernetes, CI/CD pipelines, SSH keys, and enterprise applications. Experience in configuring and managing privileged access policies, password vaulting, session management, endpoint privilege controls, secrets management, and credential lifecycle processes. Hands-on experience onboarding privileged accounts, assets, applications, service accounts, and target systems into BeyondTrust and HashiCorp Vault platforms. Experience creating and managing Vault policies, authentication methods, secrets engines, roles, access controls, asset groups, and privileged access policies. Knowledge of SQL/PL-SQL, Active Directory, LDAP, Windows Server, UNIX/Linux administration, and enterprise authentication mechanisms. Strong experience in VMware virtualization environments, and infrastructure troubleshooting supporting PAM and secrets management deployments. Knowledge of high-availability configurations, disaster recovery, replication, backup/recovery processes, and platform resiliency concepts for BeyondTrust and HashiCorp Vault. Hands-on experience with HashiCorp Vault CLI, REST APIs, PowerShell, Python, and automation/integration scripting for administration, onboarding, and operational tasks. Experience integrating BeyondTrust and HashiCorp Vault with LDAP, Active Directory, MFA solutions, SIEM platforms, IAM solutions, cloud identity providers, and DevSecOps tool chains. Experience supporting Windows and Linux operating systems and troubleshooting PAM, privileged access, and secrets-management-related issues across hybrid infrastructure environments. Strong understanding of application secrets management, dynamic secrets, certificate management, token-based authentication, and secure machine-to-machine access using HashiCorp Vault. Soft Skills Excellent communication and presentation skills. Strong problem-solving and critical thinking skills. Exceptional project management and organizational abilities. Team collaboration and leadership skills. Client-focused approach with a commitment to delivering exceptional customer service. Certifications (Good to have) Good to have relevant certificates like (any of the below): CyberArk Certified Defender CyberArk Certified Sentry BeyondTrust Certified Administrator (BCA) BeyondTrust Password Safe Certification BeyondTrust Endpoint Privilege Management (EPM) Certification BeyondTrust Privileged Remote Access (PRA) Certification Educational Qualifications University degree in IT or/and IT Security. Bachelor’s degree in computer science/ IT or any relevant fields. Other Requirements Apply now Information at a Glance Why HCLTech? At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first. HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026 totaled $14.8 billion. Disclaimer Privacy Statement Terms of use Sitemap Raise a Grievance We use cookies on our site. Please read more about cookies policy here. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Copyright © 2026 HCL Technologies Limited Cookie Consent Manager When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer. Required Cookies These cookies are required to use this website and can't be turned off. Required Cookies Required Cookies Provider Description Enabled SAP as service provider We use the following session cookies, which are all required to enable the website to function: "route" is used for session stickiness "careerSiteCompanyId" is used to send the request to the correct data center "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another Cookies from provider SAPasserviceprovider are required and cannot be turned off Functional Cookies These cookies provide a better customer experience on this site, such as by remembering your login details, optimizing video performance, or providing us with information about how our site is used. You may freely choose to accept or decline these cookies at any time. Note that certain functionalities that these third-parties make available may be impacted if you do not accept these cookies. Consent to all Functional Cookies Functional Cookies Provider Description Enabled Vimeo Vimeo is a video hosting, sharing, and services platform focused on the delivery of video. Opting out of Vimeo cookies will disable your ability to watch or interact with Vimeo videos. Cookie Policy Privacy Policy Terms and Conditions Consent to cookies from provider Vimeo YouTube YouTube is a video-sharing service where users can create their own profile, upload videos, watch, like, and comment on videos. Opting out of YouTube cookies will disable your ability to watch or interact with YouTube videos. Cookie Policy Privacy Policy Terms and Conditions Consent to cookies from provider YouTube