Security Engineer
Ernst and Young25 days ago
Bengaluru, IndiaSenior
Responsibilities
- Design, configure, operate, and improve CyberArk Privileged Account Security services, including Enterprise Password Vault, Safe design, CPM, PVWA, PSM, AAM, CCP, high availability, and disaster recovery.
- Lead solution and design reviews, develop reference architectures and integration standards, and define privileged-access onboarding strategies with application teams.
- Design, build, test, and maintain AI agents for solution assessment, pattern recommendation, design-document generation, compliance validation, and knowledge management.
- Develop RAG solutions, prompt-engineering standards, AI governance controls, and workflow automation integrating ServiceNow, CyberArk, Active Directory, and cloud platforms.
- Facilitate design workshops, translate business requirements into technical solutions, present recommendations to senior leadership, and drive cross-functional alignment.
- Configure and operate multifactor authentication, LDAP, RADIUS, and SAML integrations across operating systems, network devices, service accounts, and other target platforms.
- Perform threat modeling, security architecture reviews, attack-pattern research, risk assessment, security-control mapping, and disaster-recovery planning.
- Document and report CyberArk designs, performance metrics, security activity, operational logs, procedures, workflows, and service-intake processes.
- Provide technical guidance and coaching to globally distributed teams, lead strategic initiatives, support service quality and compliance, and participate in 24x7 on-call coverage.
Requirements
- Bachelor’s or master’s degree in computer science, information systems, engineering, or a related field.
- 5–7+ years of IAM/PAM experience with CyberArk design and implementation experience.
- Experience developing and maintaining privileged account management and security application platforms, especially CyberArk and IAM platforms.
- PowerShell, scripting, automation development, Windows Server administration, Active Directory configuration and troubleshooting, and cloud technology administration experience.
- Experience with solution, high-level, and low-level design; integration architecture; API design; threat modeling; and security architecture reviews.
- Experience mapping security controls to NIST, ISO 27001, CIS, and related frameworks, with strong information-security and cryptography knowledge.
- Experience implementing AI solutions in regulated enterprise environments; familiarity with generative AI, LLMs, agentic frameworks, Microsoft Copilot, Azure AI, and Microsoft Copilot Studio.
- Preferred experience with ServiceNow workflow development, enterprise architecture, Azure AI or Microsoft Copilot Studio, 24x7 support, and disaster-recovery execution.
- MCSA, CISSP, CISM, CISA, or CyberArk certification is required or preferred as applicable; CyberArk certification is a plus.
- Strong English communication, writing, interpersonal, analytical, problem-solving, project leadership, research, and cross-functional collaboration skills.
Benefits
- Global/cross-border role with collaboration across distributed teams, cultures, and time zones.
- Flexible schedule and on-call participation to provide 24x7 support coverage.
- Opportunity to work on global security services, enterprise AI automation, and strategic initiatives at EY.
Categories
About Ernst and Young
Ernst & Young (EY) provides audit/assurance, tax, consulting, strategy and transactions services to enterprises, financial institutions, and public‑sector clients. Structured as a global network of partner‑owned member firms, it sells professional services on a fee basis, including a dedicated Financial Services Organization for banking, insurance, and capital markets. Headquartered in London, EY was formed in 1989 from the merger of Ernst & Whinney and Arthur Young, and operates in 150+ countries.