LogoFresh Jobs Ahead
Ralliant
Ralliant
5 001 – 10 000 Darbuotojai
H1B vizos rėmėjasGamybaGynybaSveikatos priežiūra
„Ralliant“ yra pasaulinė precizinių technologijų įmonė, kurianti inžinerinius komponentus, mazgus ir sistemas elektrifikuotiems bei skaitmeniniams gaminiams. Jos veikla padeda įgyvendinti sudėtingus sprendimus gamybos, sveikatos priežiūros ir gynybos srityse, įskaitant medicinos įrangą ir gynybos sistemas. „Ralliant“ glaudžiai bendradarbiauja su inžinieriais, kad sudėtingus reikalavimus paverstų patikimais gaminiais, derindama precizinę gamybą su nuolatiniu tobulėjimu pagal „Ralliant Business System“ ir specializuotų technologinių kompetencijų portfelį.
LinkedIn
Darbai įmonėje

Senior Identity Engineer – Privileged Access, India Hybrid

Senior Identity Engineer responsible for CyberArk Privileged Cloud and non-human identity governance at Ralliant. The role focuses on secure access automation, integration troubleshooting, compliance controls, and operational reporting.

INIndijaHibridinisVisas etatasVyresnysis specialistasVadovasPrivaloma Kalba: anglųInžinierius
AWSAzureDebesijaDNSGoogle Cloud PlatformKibernetinis saugumasPythonTCP/IPUžkardosVault

Aprašymas

  • Manage and support CyberArk Privileged Cloud, including users, groups, safes, vault settings, and PSM/CPM operations.
  • Implement password, access, and workflow controls for privileged account onboarding, credential rotation, and least-privilege access.
  • Lead non-human identity management covering service accounts, API keys, secrets, certificates, and machine or workload identities.
  • Govern non-human identity lifecycles through discovery, ownership assignment, credential rotation, expiration monitoring, and decommissioning.
  • Operate secrets management and vaulting for applications, automation, and CI/CD pipelines.
  • Investigate PSM and CPM issues affecting RDP, SSH, and web-based privileged access.
  • Diagnose network and connectivity problems involving firewalls, NAT, DNS, and certificate-chain validation.
  • Troubleshoot authentication and authorization integrations across Active Directory/LDAP, SAML, OAuth 2.0, MFA, and SSO.
  • Create PowerShell and Python/REST API automation with CyberArk SDKs and vendor APIs for PAM and NHI processes.
  • Review CyberArk, system, and network logs while supporting SIEM integration, anomaly detection, and incident response.
  • Apply privileged-access and non-human-identity security practices to support SOX, PCI-DSS, NIST, and ISO 27001 compliance.
  • Collaborate with Security, Infrastructure, and Application teams across enterprise and OpCo environments.
  • Maintain procedures, configurations, and incident records, and train application owners and DevOps teams.
  • Produce reports and Power BI dashboards covering PAM and NHI health, credential rotation, orphaned accounts, vault usage, and audit readiness.

Reikalavimai

  • A bachelor’s degree is recommended, though equivalent experience may be considered.
  • At least 10 years of experience in cybersecurity, systems administration, or identity and access management.
  • Five or more years of hands-on experience with CyberArk Privileged Cloud.
  • Strong knowledge of Privileged Access Security architecture, including Vault, PSM, CPM, and Cloud Entitlements Manager.
  • Proven experience managing non-human identities at scale, including service accounts, API keys, secrets managers, and machine or workload identities.
  • Familiarity with secrets-management tools and practices such as CyberArk Conjur/Secrets Hub, HashiCorp Vault, or equivalent, plus CI/CD credential hygiene.
  • Proficiency in TCP/IP networking, firewalls, and DNS or certificate troubleshooting across on-premises and cloud environments, including AWS, Azure, and GCP.
  • Experience troubleshooting authentication and authorization with Active Directory/LDAP, Entra ID, SAML, OAuth 2.0, MFA, and SSO.
  • Scripting capability in PowerShell and Python, with practical knowledge of REST APIs and CyberArk SDKs.
  • Experience analyzing logs, integrating SIEM platforms, responding to incidents, and performing root-cause analysis.
  • Knowledge of SOX, PCI-DSS, NIST, and ISO 27001 frameworks, along with zero-trust security principles.
  • CyberArk Trustee certification or higher is preferred.
  • AWS, Azure, GCP, CISSP, CISM, or Security+ certification is an advantage.
  • Strong communication and documentation skills, including the ability to explain technical topics to non-technical stakeholders and train application owners and DevOps teams.
  • Ability to work effectively across enterprise and OpCo environments, time zones, and cultures.
  • Alignment with Ralliant values and the Ralliant Business System, including continuous improvement, transparency, and ownership.

Privalumai

  • The posting does not specify benefits, perks, or additional compensation details.

Susiję darbai