Ralliant ir globāls precīzo tehnoloģiju uzņēmums, kas izstrādā inženiertehniskus komponentus, mezglus un sistēmas elektrificētiem un digitāliem produktiem. Tā darbs atbalsta prasīgus lietojumus ražošanas, veselības aprūpes un aizsardzības nozarēs, tostarp medicīnas aprīkojumā un aizsardzības sistēmās. Ralliant cieši sadarbojas ar inženieriem, lai sarežģītas prasības pārvērstu uzticamos produktos, apvienojot precīzo ražošanu ar nepārtrauktu uzlabošanu, ko nodrošina Ralliant Business System un specializēto tehnoloģisko kompetenču portfelis.
Senior Identity Engineer – Privileged Access, India Hybrid
Senior Identity Engineer responsible for CyberArk Privileged Cloud and non-human identity governance at Ralliant. The role focuses on secure access automation, integration troubleshooting, compliance controls, and operational reporting.
Apraksts
- Manage and support CyberArk Privileged Cloud, including users, groups, safes, vault settings, and PSM/CPM operations.
- Implement password, access, and workflow controls for privileged account onboarding, credential rotation, and least-privilege access.
- Lead non-human identity management covering service accounts, API keys, secrets, certificates, and machine or workload identities.
- Govern non-human identity lifecycles through discovery, ownership assignment, credential rotation, expiration monitoring, and decommissioning.
- Operate secrets management and vaulting for applications, automation, and CI/CD pipelines.
- Investigate PSM and CPM issues affecting RDP, SSH, and web-based privileged access.
- Diagnose network and connectivity problems involving firewalls, NAT, DNS, and certificate-chain validation.
- Troubleshoot authentication and authorization integrations across Active Directory/LDAP, SAML, OAuth 2.0, MFA, and SSO.
- Create PowerShell and Python/REST API automation with CyberArk SDKs and vendor APIs for PAM and NHI processes.
- Review CyberArk, system, and network logs while supporting SIEM integration, anomaly detection, and incident response.
- Apply privileged-access and non-human-identity security practices to support SOX, PCI-DSS, NIST, and ISO 27001 compliance.
- Collaborate with Security, Infrastructure, and Application teams across enterprise and OpCo environments.
- Maintain procedures, configurations, and incident records, and train application owners and DevOps teams.
- Produce reports and Power BI dashboards covering PAM and NHI health, credential rotation, orphaned accounts, vault usage, and audit readiness.
Prasības
- A bachelor’s degree is recommended, though equivalent experience may be considered.
- At least 10 years of experience in cybersecurity, systems administration, or identity and access management.
- Five or more years of hands-on experience with CyberArk Privileged Cloud.
- Strong knowledge of Privileged Access Security architecture, including Vault, PSM, CPM, and Cloud Entitlements Manager.
- Proven experience managing non-human identities at scale, including service accounts, API keys, secrets managers, and machine or workload identities.
- Familiarity with secrets-management tools and practices such as CyberArk Conjur/Secrets Hub, HashiCorp Vault, or equivalent, plus CI/CD credential hygiene.
- Proficiency in TCP/IP networking, firewalls, and DNS or certificate troubleshooting across on-premises and cloud environments, including AWS, Azure, and GCP.
- Experience troubleshooting authentication and authorization with Active Directory/LDAP, Entra ID, SAML, OAuth 2.0, MFA, and SSO.
- Scripting capability in PowerShell and Python, with practical knowledge of REST APIs and CyberArk SDKs.
- Experience analyzing logs, integrating SIEM platforms, responding to incidents, and performing root-cause analysis.
- Knowledge of SOX, PCI-DSS, NIST, and ISO 27001 frameworks, along with zero-trust security principles.
- CyberArk Trustee certification or higher is preferred.
- AWS, Azure, GCP, CISSP, CISM, or Security+ certification is an advantage.
- Strong communication and documentation skills, including the ability to explain technical topics to non-technical stakeholders and train application owners and DevOps teams.
- Ability to work effectively across enterprise and OpCo environments, time zones, and cultures.
- Alignment with Ralliant values and the Ralliant Business System, including continuous improvement, transparency, and ownership.
Priekšrocības
- The posting does not specify benefits, perks, or additional compensation details.