PAM and Secrets Management Engineer

Applied Materials
Bengaluru
Workplace: OnsiteFull timeFunction: Solutions Engineering & Sales EngineeringEducation: bachelorsSkills: ["Communication","Cross-functional collaboration","Incident response","Technical mentorship","Troubleshooting"]

Lead privileged access management (PAM) and secrets management initiatives across Applied Materials’ global enterprise infrastructure. Architect and operate enterprise-scale PAM using CyberArk and secrets management using HashiCorp Vault, integrating with multi-cloud, Kubernetes, and CI/CD pipelines. Design secure session management, automate account discovery/onboarding, implement Vault authentication/policies, and ensure availability, DR, performance, and compliance while troubleshooting security and infrastructure incidents.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Applied Materials
Applied Materials
3 days ago

PAM and Secrets Management Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 1 hour agoStatus: Live
Reposted: similar role first listed 4 months ago

Job Summary

Lead privileged access management (PAM) and secrets management initiatives across Applied Materials’ global enterprise infrastructure. Architect and operate enterprise-scale PAM using CyberArk and secrets management using HashiCorp Vault, integrating with multi-cloud, Kubernetes, and CI/CD pipelines. Design secure session management, automate account discovery/onboarding, implement Vault authentication/policies, and ensure availability, DR, performance, and compliance while troubleshooting security and infrastructure incidents.
Location: Bengaluru
Workplace: Onsite
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering

Key Responsibilities

  • •Design, implement, and manage enterprise PAM solutions at scale, including CyberArk self-hosted operations, privileged session management, session recording, monitoring, alerting, and compliance.
  • •Troubleshoot and resolve PAM infrastructure stability issues to eliminate outages, and automate account discovery and onboarding workflows across Windows local, AD, and Linux/Unix accounts.
  • •Architect and operate HashiCorp Vault Enterprise across multi-cloud environments, including secrets engines (KV v2, Dynamic Secrets, PKI, Transit) and multi-tenant policy/namespace isolation.
  • •Implement Vault authentication methods (OIDC/JWT, Kubernetes, AppRole, AWS IAM, Azure AD), integrate Vault with CI/CD pipelines for secure secret injection, and configure Vault auto-unseal and high availability/DR.
  • •Lead incident response for privileged access breaches and secrets exposure events, conduct security assessments to ensure compliance with SOX, PCI-DSS, ISO 27001, and automate PAM/secret workflows using scripting and Infrastructure-as-Code.
Travel: Low travel

Key Requirements

  • •5+ years hands-on experience with enterprise PAM solutions at scale, including privileged session management (RDP/SSH), recording, monitoring, and credential injection.
  • •Strong account lifecycle management experience (discovery, onboarding, rotation) for Windows local, AD, and Linux/Unix accounts, including least privilege and privilege elevation workflows.
  • •Hands-on experience with CyberArk platforms (PAS, PVWA, CPM, PSM) or equivalent PAM solutions such as BeyondTrust, Delinea, or Arcon.
  • •3+ years hands-on experience with HashiCorp Vault in production, including KV, Dynamic Secrets, PKI, Transit, and knowledge of Vault authentication methods (Kubernetes, AppRole, OIDC/JWT, AWS IAM, Azure AD, LDAP, TLS).
  • •Experience integrating PAM/SM with CI/CD pipelines and automation/scripting using Python, Bash, PowerShell, Terraform, and Ansible.
Experience:Enterprise securityPrivileged access managementSecrets managementMulti-cloudKubernetes
Education:Bachelor's in Computer Science, Information Security, or related field
Skills:CommunicationCross-functional collaborationIncident responseTechnical mentorshipTroubleshooting
Certifications:CyberArk DefenderCyberArk SentryCyberArk TrusteeHashiCorp Vault AssociateHashiCorp Vault ProfessionalCISSPCISMCISACEHAWS Security SpecialtyAzure Security EngineerGCP Security Engineer
Tech Stack:CyberArkHashiCorp VaultDelineaBeyondTrustArconPythonBashPowerShellGoTerraformAnsibleJenkinsGitLabGitHub ActionsAzure DevOpsKubernetesAWS IAMAzure ADAWS KMSAzure Key Vault

Company Brief

Applied Materials
Provides semiconductor manufacturing equipment, services, and software used to build advanced chips and display technologies. Its tools support materials engineering, deposition, etching, inspection, and process control for major electronics manufacturers worldwide.
Industry: Industrial Machinery
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Santa Clara, United States
Founded: 1967
Glassdoor
Glassdoor: 3.9
WebsiteLinkedInGlassdoor