Ralliant
Ralliant
Ralliant este o companie globală de tehnologii de precizie care creează componente, ansambluri și sisteme proiectate pentru produse electrificate și digitale. Activitatea sa sprijină aplicații exigente din domeniile producției, sănătății și apărării, inclusiv echipamente medicale și sisteme de apărare. Ralliant colaborează îndeaproape cu inginerii pentru a transforma cerințele complexe în produse fiabile, combinând producția de precizie cu îmbunătățirea continuă prin Ralliant Business System și un portofoliu de capabilități tehnologice specializate.

Senior Identity Engineer – Privileged Access, India Hybrid

Senior Identity Engineer responsible for CyberArk Privileged Cloud and non-human identity governance at Ralliant. The role focuses on secure access automation, integration troubleshooting, compliance controls, and operational reporting.

Descriere

  • Manage and support CyberArk Privileged Cloud, including users, groups, safes, vault settings, and PSM/CPM operations.
  • Implement password, access, and workflow controls for privileged account onboarding, credential rotation, and least-privilege access.
  • Lead non-human identity management covering service accounts, API keys, secrets, certificates, and machine or workload identities.
  • Govern non-human identity lifecycles through discovery, ownership assignment, credential rotation, expiration monitoring, and decommissioning.
  • Operate secrets management and vaulting for applications, automation, and CI/CD pipelines.
  • Investigate PSM and CPM issues affecting RDP, SSH, and web-based privileged access.
  • Diagnose network and connectivity problems involving firewalls, NAT, DNS, and certificate-chain validation.
  • Troubleshoot authentication and authorization integrations across Active Directory/LDAP, SAML, OAuth 2.0, MFA, and SSO.
  • Create PowerShell and Python/REST API automation with CyberArk SDKs and vendor APIs for PAM and NHI processes.
  • Review CyberArk, system, and network logs while supporting SIEM integration, anomaly detection, and incident response.
  • Apply privileged-access and non-human-identity security practices to support SOX, PCI-DSS, NIST, and ISO 27001 compliance.
  • Collaborate with Security, Infrastructure, and Application teams across enterprise and OpCo environments.
  • Maintain procedures, configurations, and incident records, and train application owners and DevOps teams.
  • Produce reports and Power BI dashboards covering PAM and NHI health, credential rotation, orphaned accounts, vault usage, and audit readiness.

Cerințe

  • A bachelor’s degree is recommended, though equivalent experience may be considered.
  • At least 10 years of experience in cybersecurity, systems administration, or identity and access management.
  • Five or more years of hands-on experience with CyberArk Privileged Cloud.
  • Strong knowledge of Privileged Access Security architecture, including Vault, PSM, CPM, and Cloud Entitlements Manager.
  • Proven experience managing non-human identities at scale, including service accounts, API keys, secrets managers, and machine or workload identities.
  • Familiarity with secrets-management tools and practices such as CyberArk Conjur/Secrets Hub, HashiCorp Vault, or equivalent, plus CI/CD credential hygiene.
  • Proficiency in TCP/IP networking, firewalls, and DNS or certificate troubleshooting across on-premises and cloud environments, including AWS, Azure, and GCP.
  • Experience troubleshooting authentication and authorization with Active Directory/LDAP, Entra ID, SAML, OAuth 2.0, MFA, and SSO.
  • Scripting capability in PowerShell and Python, with practical knowledge of REST APIs and CyberArk SDKs.
  • Experience analyzing logs, integrating SIEM platforms, responding to incidents, and performing root-cause analysis.
  • Knowledge of SOX, PCI-DSS, NIST, and ISO 27001 frameworks, along with zero-trust security principles.
  • CyberArk Trustee certification or higher is preferred.
  • AWS, Azure, GCP, CISSP, CISM, or Security+ certification is an advantage.
  • Strong communication and documentation skills, including the ability to explain technical topics to non-technical stakeholders and train application owners and DevOps teams.
  • Ability to work effectively across enterprise and OpCo environments, time zones, and cultures.
  • Alignment with Ralliant values and the Ralliant Business System, including continuous improvement, transparency, and ownership.

Beneficii

  • The posting does not specify benefits, perks, or additional compensation details.

Locuri de muncă similare

Bank of America

Risk Analysis Specialist III

Bank of America

Improve data quality, business controls, and operational risk practices across Bank of America’s risk analytics and capital management work. Collaborate with teams across the organization to assess processes and deliver actionable insights.

Deschide
West Bend Insurance Company

Senior Manager, Underwriting Business Services

West Bend Insurance Company

Lead underwriting quality, policy services, and technical operations at West Bend Insurance Company. Drive operational performance, risk management, team development, and cross-functional improvements.

Deschide
Highmark Health