How You'll Help Us Keep Climbing (Overview & Key Responsibilities)

Role Overview

Hiring for a CyberArk PAM Engineer with 7-12 years of hands‑on experience across CyberArk PAM, EPM, CyberArk Privilege Cloud, CyberArk Identity, and managing CyberArk infrastructure on AWS, holding CyberArk Sentry or higher certification.

Key Responsibilities

Design, deploy, and maintain CyberArk Privileged Access Management (PAM) solutions including Vault, CPM, PSM, PTA and Privilege Cloud for hybrid and cloud‑native environments.
Administer and optimize CyberArk Endpoint Privilege Manager (EPM) policies to enforce least privilege and application control on servers and end‑user endpoints.
Implement and manage CyberArk Privilege Cloud, including onboarding of accounts, proxy‑based access, session recording, and periodic password rotation.
Configure and support CyberArk Identity (IDaaS/SSO/MFA) integrations with enterprise applications, directories, and cloud platforms.
wn end‑to‑end CyberArk infrastructure on AWS: sizing and deploying components, HA/DR design, backup and recovery, patching, and performance tuning.
Integrate CyberArk with LDAP/AD, RADIUS, SMTP, SIEM/Syslog, ticketing tools, and other security platforms following best practices.
Develop and maintain onboarding workflows, platforms, and policies for privileged accounts and secrets across on‑prem, cloud, and SaaS workloads.
Monitor, troubleshoot, and resolve complex issues in PAM/EPM/Privilege Cloud/Identity environments, including advanced PSM and CPM configurations.
Collaborate with security architecture, IAM, cloud, and application teams to design secure privileged access patterns and controls.
Produce and maintain technical documentation, runbooks, and diagrams for CyberArk solutions and related integrations.
Support audits and compliance activities by providing reports, evidence of control effectiveness, and remediation plans for findings.

What You Need To Succeed (Minimum Qualifications)

Bachelor's degree in Computer Science, Information Security, Engineering, or a related discipline, or equivalent practical experience.
7-12 years total experience in information security with at least 5+ years dedicated to CyberArk PAM engineering.
Strong hands‑on experience with CyberArk components: Enterprise Password Vault (EPV), CPM, PSM, PTA, and Application Access Manager/Secrets management.
Proven experience implementing and operating CyberArk Privilege Cloud in production, including migrations from on‑prem PAM where applicable.
Practical experience with CyberArk EPM: policy design, least‑privilege enforcement, elevation rules, and endpoint hardening.
Working knowledge of CyberArk Identity (SSO, MFA, lifecycle flows) and its integration with AD, Entra ID (Azure AD), and major SaaS apps.
Strong AWS experience operating security or IAM‑related workloads (EC2, RDS, networking, load balancers, security groups, IAM roles/policies) supporting CyberArk infrastructure.
Familiarity with common operating systems (Windows, Linux/UNIX) and directory services (AD/LDAP) from a PAM perspective.
Experience integrating CyberArk with SIEM/SOC, ITSM, and ticketing tools, and building monitoring and alerting around PAM/EPM services.
Scripting skills (PowerShell, Python, or similar) for automation, bulk onboarding, health checks, and reporting.
Solid understanding of identity security, least privilege, Just-In-Time (JIT), Zero Trust, and privileged threat detection concepts.

AI, Machine Identity & Non-Human Identity Security

Design and implement security controls for Non-Human Identities (NHIs), including service accounts, machine identities, API credentials, application secrets, certificates, and AI-enabled workloads.
Partner with AI, Data, Platform, and Cloud Engineering teams to establish secure privileged access patterns for AI/ML platforms and agentic workflows.
Implement controls to mitigate emerging threats associated with AI agents, including over-privileged access, credential abuse, unauthorized actions, and prompt-injection-induced privilege misuse.
Leverage PAM telemetry, SIEM integrations, and AI/ML-driven monitoring solutions to detect abnormal privileged behavior involving both human and non-human identities.

Behavioral Competencies

Lead initiatives with high accountability, create a collaborative environment with a solution-based approach.
Serve as a trusted advisor and mentor for the team offering technical advice.
Ability to communicate with precision, engaging team and stakeholders to build trust and reliable working relationships across cross-functional teams and geographies enabling organizational alignment.
Ability to set priorities with the team by understanding interdependence, inspiring team members with consistent focus, quality output, and timelines.
Constantly keep oneself updated on current technology & trends to drive innovative decisions through piloting forward-thinking approaches to complex problems in one's own area of work.
Inquisitive to understand customer priorities and business challenges while creating value for technical solutions.

What Will Give You a Competitive Edge (Preferred Qualifications)

Mandatory: CyberArk Sentry‑level certification (e.g., CyberArk Sentry PAM / CyberArk Sentry Privilege Cloud / equivalent) or above.
Experience implementing CyberArk Secrets Manager, Conjur, or machine identity security solutions at enterprise scale.
Experience securing AI agents, Generative AI applications, AI-powered automation platforms, and agentic architectures.
Experience designing governance and lifecycle management controls for Non-Human Identities (NHIs) across large enterprise environments.
Expertise in Zero Standing Privilege (ZSP), Just-In-Time (JIT) access, and advanced privileged access workflows.
Experience integrating CyberArk solutions into DevSecOps, CI/CD pipelines, Infrastructure-as-Code, containerized workloads, and cloud-native platforms.
Familiarity with AWS Bedrock, Lambda, or other AI/ML platforms from a security and privileged access perspective.
Experience leveraging behavioral analytics, AI-assisted security monitoring, and advanced threat detection capabilities.
Knowledge of emerging AI security risks, including prompt injection attacks, autonomous agent privilege escalation, credential abuse, and secure AI governance practices.
Proven ability to lead enterprise PAM transformation initiatives, cloud migrations, and modernization programs.
Strong stakeholder management, consulting, and technical leadership capabilities with the ability to influence architecture and security decisions across the organization.

About The Company

What started as a humble, little aerial crop-dusting operation called Huff Daland Dusters in 1924 has now grown into the U.S. global airline leader in safety, innovation, reliability, and customer experience. Headquartered in Atlanta, Georgia, Delta Air Lines is known for its operational excellence and award-winning customer service.

Powered by our employees worldwide, Delta has led the airline industry in operational excellence for a decade while maintaining our reputation for award-winning customer service. With our mission of connecting the people and cultures of the globe, Delta strives to foster understanding across a diverse world and serve as a force for social good.

In 2026, Delta Air Lines continued to earn global recognition for its performance, culture and operational excellence. Delta was named to Glassdoor's 2026 Top 100 Best Places to Work list for the ninth time, standing as the only airline recognized. Delta also secured the 11th spot on Fortune's World's Most Admired Companies list, marking its 13th consecutive year earning this distinction. Delta was also recognized by Cirium as the top on-time airline in North America for the fifth consecutive year, underscoring its unwavering commitment to reliability and customer experience.

About The Delta Technology Hub (DTH), Bangalore

The DTH is one of Delta Air Lines investments in world-class business capabilities and technology aimed at transforming how Delta Air Lines operates and provides world-class travel experiences to its customers through innovation and cutting-edge methodologies. By continuously reimagining processes and driving technology-led transformation, the Delta Technology Hub plays a pivotal role in Scripting The Future Of Aviation. The organization is certified by the Great Place to Work Institute (India). The Delta Technology Hub was a finalist for the iVolunteer Awards 2024/2025 in the Leader in Employee Volunteering category. This nomination highlights our remarkable volunteering initiatives and the outstanding practices we implement to encourage and support our employee volunteering program.

For more information, please visit www.deltatechhub.com

Why join

Technology is a key enabler of the differentiated services that Delta provides. At the DTH, you get the opportunity to work on projects with a significant impact on business outcomes and customer experience.
Deepen your knowledge by taking part in multifaceted learning and development programs –exposure to extensive internal and partner repositories, institutional affiliations, and industry SIG (Special Interest Groups) partnerships.
Immerse yourself in an employee-centric culture.
Develop deep and broad business acumen on airline operations while retaining focus on cutting-edge technology driven solutions.
Avail a full range of benefits that support you and your family: Medical Insurance, Transportation to and from the DTH office, Complementary Cafeteria Meals, Special Travel opportunities and Travel Privileges, Car Lease Program, Paid time off, Parental Benefits and National Pension Scheme.

Senior CyberArk PAM Engineer