Administrator CyberArk PAM DellOne TPAM

About the Role

HCLTech is seeking an Administrator for CyberArk PAM and DellOne TPAM to join their team in Riyadh. This full-time role involves designing, implementing, and maintaining enterprise-wide Privileged Access Management (PAM) solutions to ensure the secure management of privileged credentials and access across the infrastructure.

Key Responsibilities

• Design, implement, and maintain enterprise-wide Beyond PAM solutions to ensure secure management of privileged credentials and access.
• Provide L3 technical support for complex PAM-related incidents and problems within the infrastructure environment.
• Develop and enforce PAM policies, procedures, and standards aligned with industry best practices and compliance requirements.
• Manage the full lifecycle of privileged accounts, including provisioning, certification, and deprovisioning.
• Implement and optimize PAM tools for session recording, credential vaulting, and automated password rotation.
• Operate Thales MFA and token management, and integrate MFA with ADFS for token management.
• Utilize Beyond Trust password vault for saving complex passwords.
• Conduct regular security assessments and audits of privileged access controls.
• Perform root cause analysis for security incidents related to privileged access.
• Create and maintain documentation for PAM architecture, configurations, and operational procedures.
• Collaborate with cross-functional teams to integrate PAM solutions with existing infrastructure and security tools.
• Provide mentorship to junior team members on PAM best practices and troubleshooting techniques.
• Work for security management in the domain and drive compliance activities.
• Provide support for CyberArk PAM (Vault, PVWA, CPM & PSM) and BeyondTrust Privileged Identity by resolving on-call escalations and performing root cause analysis.
• Manage and maintain privileged access solutions using DellOne TPAM and NetIQ PAM, ensuring compliance with quality standards and regulatory requirements.
• Conduct updates and management of the knowledge base, contributing to continuous improvement through documentation.
• Train and mentor new team members and analysts on PAM tools and processes.
• Independently resolve support tickets within agreed SLAs, striving for first call resolution and minimizing case reopens.

Required Skills and Expertise

• PAM Platforms: CyberArk, BeyondTrust, HashiCorp Vault, Thycotic Secret Server.
• Operating Systems: Windows Server, Linux (various distributions).
• Directory Services: Active Directory, LDAP.
• Authentication: SAML, OAuth, MFA, PKI.
• Networking: TCP/IP, firewalls, routing, VPN technologies.
• Scripting: PowerShell, Python, Bash.
• SIEM Tools: Splunk, QRadar, ArcSight or similar.
• Infrastructure as Code: Terraform, Ansible.

Preferred Qualifications

• Relevant certifications such as CISSP, CISM, BeyondTrust.
• Experience with DevSecOps practices and tools.
• Familiarity with cloud security and PAM solutions for cloud environments (AWS, Azure, GCP).
• Experience with implementing Just-In-Time (JIT) and Zero Trust access models.
• Knowledge of threat detection and incident response processes.
• Experience with automation and orchestration tools for security operations.

Work Environment

This is a full-time position based in Riyadh, focusing on critical security management within the domain and driving compliance activities.