Sr Administrator (Support & Operations)

Job description

Job Summary : The PAM Engineer is responsible for the administration, support, monitoring, security, and governance of Privileged Access Management (PAM) platforms. The role ensures secure management of privileged identities, credentials, secrets, sessions, and elevated access across operating systems, databases, cloud platforms, and enterprise applications. The engineer supports day-to-day operations, incident resolution, audits, onboarding activities, and continuous improvement of PAM services. Job Responsibilities : PAM Platform Administration • Support all components and products within the PAM ecosystem. • Manage privileged credentials and privileged identity lifecycle processes. • Support session isolation, privileged account discovery, and least-privilege enforcement. • Maintain PAM platform configurations and operational stability Privileged Account Management • Onboard and manage privileged accounts across servers, databases, cloud environments, and applications. • Eliminate hardcoded credentials and centralize credential management through PAM tools. • Provision, modify, and remove privileged accounts based on approved requests. • Manage service accounts and application credentials. Safe and Vault Administration • Create new safes and update existing safes. • Assign and manage safe permissions, access rights, and safe properties. • Manage vault configurations, credential storage, and security controls. • Support secrets management activities across PAM platforms. Privileged Session Management • Initiate, monitor, and record privileged sessions. • Ensure privileged sessions comply with security requirements. • Support investigation and review of privileged session activities. • Maintain session recording and audit capabilities. Endpoint Privilege Management (EPM) • Support least-privilege enforcement on user endpoints. • Create, modify, and troubleshoot EPM policies. • Consolidate and enhance privilege management controls. • Support EPM agent updates, upgrades, and operational maintenance. Operations & Incident Management • Resolve ServiceNow incidents and service requests related to PAM. • Troubleshoot account issues, permissions issues, and platform errors. • Perform daily health checks of PAM infrastructure and services. • Manage component start/stop activities during maintenance, upgrades, and troubleshooting exercises. • Support platform patching and minor upgrades. Security, Audit & Compliance • Perform access reviews across PAM platforms. • Support audit reviews, remediation activities, and data cleanup. • Generate operational reports, KPI reports, KRIs, and compliance reports. • Manage CyberArk LDAP mappings and master policy configurations. • Support continuous compliance with security policies and standards. ________________________________________ Engineering & Project Activities Application Onboarding • Integrate applications with PAM credential providers. • Configure application authentication and credential retrieval methods. • Provision privileged application accounts. • Support application onboarding into secret management platforms. Secret Management • Implement secure secret handling processes. • Configure secret management vaults and secret servers. • Configure audit logging and vault logging. • Support LDAP authentication for vault administration. • Configure LDAP service accounts for automation activities. Strategy & Continuous Improvement • Assist in designing future PAM solutions and security strategies. • Support emerging threat mitigation initiatives. • Participate in automation and modernization programs. • Recommend PAM enhancements and best practices. Key Responsibilities NA Skill Requirements Skill Requirement : PAM Technologies • CyberArk PAM • CyberArk Vault • CyberArk Privileged Session Manager (PSM) • CyberArk Central Policy Manager (CPM) • CyberArk Endpoint Privilege Manager (EPM) • CyberArk Secrets Management (Conjur preferred) and Secret Hub Identity & Directory Services • Active Directory • LDAP • Azure AD / Microsoft Entra ID • Service Account Management Operating Systems & Platforms • Windows Server Administration • Linux/Unix Administration • Database Access Management • Cloud Platform Access Management Security & Governance • Privileged Access Governance • Secrets Management • Access Reviews • Security Audits • Compliance Reporting • Least Privilege Controls ITSM & Automation • ServiceNow • Incident Management • Change Management • Problem Management • PowerShell • Scripting & Automation Other Requirements Other Requirement : PAM Engineer (L1) • 2 to 4 years of experience in PAM Operations. • Experience with privileged account administration and basic CyberArk support. Senior PAM Engineer (L2) • 4 to 7 years of experience supporting enterprise PAM platforms. • Experience in application onboarding, vault administration, and policy management. Lead PAM Engineer (L3) • 7+ years of experience in enterprise PAM architecture and operations. • Experience in PAM transformation, solution design, and security governance. ________________________________________ Apply now Information at a Glance Why HCLTech? At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first. HCLTech is a global technology company, home to more than 230,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending September 2026 totaled $14.8 billion. Disclaimer Privacy Statement Terms of use Sitemap Raise a Grievance We use cookies on our site. Please read more about cookies policy here. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Copyright © 2026 HCL Technologies Limited Cookie Consent Manager When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer. Required Cookies These cookies are required to use this website and can't be turned off. Required Cookies Required Cookies Provider Description Enabled SAP as service provider We use the following session cookies, which are all required to enable the website to function: "route" is used for session stickiness "careerSiteCompanyId" is used to send the request to the correct data center "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another Cookies from provider SAPasserviceprovider are required and cannot be turned off Functional Cookies These cookies provide a better customer experience on this site, such as by remembering your login details, optimizing video performance, or providing us with information about how our site is used. You may freely choose to accept or decline these cookies at any time. Note that certain functionalities that these third-parties make available may be impacted if you do not accept these cookies. Consent to all Functional Cookies Functional Cookies Provider Description Enabled Vimeo Vimeo is a video hosting, sharing, and services platform focused on the delivery of video. Opting out of Vimeo cookies will disable your ability to watch or interact with Vimeo videos. Cookie Policy Privacy Policy Terms and Conditions Consent to cookie