Privileged Access Management (PAM)

Job SummaryThe PAM professional is responsible for assessing the existing privileged access landscape, performing gap analysis against security standards and best practices, gathering and translating business and technical requirements, and designing, implementing, and optimizing PAM solutions across on‑premises, cloud, and hybrid environments. The role plays a critical part in reducing cyber risk, ensuring regulatory compliance, and enabling secure privileged access. Key Responsibilities1. Existing Environment Assessment· Perform detailed discovery and assessment of current privileged access usage across:o Servers (Windows, Unix/Linux)o Databaseso Network deviceso Cloud platforms (AWS, Azure, GCP)o Applications and DevOps pipelines· Identify and document:o Privileged user accounts (human and non‑human)o Service and application accountso Shared, orphaned, and unmanaged privileged credentialso Current access workflows and approval mechanisms· Review existing controls related to:o Identity and Access Management (IAM)o Password policies and rotation practiceso Logging, monitoring, and audit mechanisms· Analyze integration points with:o Active Directory / LDAPo SIEM, SOARo ITSM tools (e.g., ServiceNow)o MFA and authentication services 2. Gap Analysis· Conduct gap analysis between the existing PAM posture and:o Industry best practiceso Zero Trust principleso Standards such as ISO 27001, NIST, CIS, SOX, GDPR (as applicable)· Identify gaps related to:o Excessive or standing privileged accesso Lack of credential vaultingo Absence of session monitoring and recordingo Manual or weak access request and approval processeso Non‑compliant password and secret management· Document risk impact, severity, and remediation recommendations· Provide clear, prioritized gap analysis reports for technical and executive stakeholders 3. Requirement Gathering· Engage with stakeholders including:o IT Infrastructure and Operationso Security Operations (SOC)o Application ownerso Cloud and DevOps teamso Compliance, Risk, and Audit teams· Collect and document:o Functional requirements (access control, session management, reporting)o Non‑functional requirements (availability, scalability, performance)o Regulatory and audit requirementso Business and operational constraints· Define:o Privileged access use caseso User roles and responsibilitieso Just‑In‑Time (JIT) access modelso Approval workflows and lifecycle management· Produce Business Requirement Documents (BRD) and Technical Requirement Specifications (TRS) 4. PAM Solution Design & Implementation· Design PAM architecture aligned with enterprise security strategy· Implement PAM solutions such as:o CyberArk, BeyondTrust, Delinea, or equivalent platforms· Configure:o Privileged credential vaultingo Password rotation and secrets managemento Session brokering, monitoring, and recordingo Role‑based access control and policy enforcement· Integrate PAM with:o Directory serviceso MFA solutionso SIEM/SOC platformso ITSM systems for access request workflows· Support phased onboarding of:o Infrastructure componentso Applicationso Cloud workloads· Ensure minimal business disruption during rollout 5. Testing, Validation & Go‑Live Support· Perform:o Functional and security testingo User acceptance testing (UAT)· Validate:o Access control logico Audit logs and session recordingso Failover and resilience scenarios· Support production rollout and hypercare phases· Troubleshoot implementation and operational issues 6. Documentation & Knowledge Transfer· Create and maintain:o Architecture diagramso Configuration and build documentso Standard operating procedures (SOPs)· Deliver knowledge transfer sessions to:o Operations teamso Security teamso Application support teams 7. Governance, Compliance & Continuous Improvement· Ensure PAM controls support:o Internal security policieso Regulatory and audit requirements· Assist in audit responses and evidence generation· Identify opportunities for process improvement and automation· Support ongoing PAM maturity and optimization initiatives Required Skills & ExperienceTechnical Skills· Strong understanding of PAM concepts and privileged identity security· Experience with PAM tools (CyberArk, BeyondTrust, Delinea, Azure PIM, etc.)· Knowledge of:o Active Directory, LDAPo Windows, Linux/Unix systemso Networking fundamentalso Cloud security and IAM· Familiarity with security frameworks and standardsSoft Skills· Strong stakeholder management and communication skills· Ability to translate business needs into technical solutions· Analytical mindset with strong documentation capabilities· Experience leading workshops and technical discussions Experience & Qualifications· 5+ years in Identity & Access Management or Cybersecurity roles· 3+ years hands‑on experience in PAM projects· Certifications (preferred):o CISSP, CISMo CyberArk / BeyondTrust certificationsAbout Infosys Infosys is a global leader in next-generation digital services and consulting. We enable clients in 59 countries to navigate their digital transformation.With over four decades of experience in managing the systems and workings of global enterprises, we expertly steer clients, in 59 countries, as they navigate their digital transformation powered by cloud and AI. We enable them with an AI-first core, empower the business with agile digital at scale and drive continuous improvement with always-on learning through the transfer of digital skills, expertise, and ideas from our innovation ecosystem. We are deeply committed to being a well-governed, environmentally sustainable organization where diverse talent thrives in an inclusive workplace.

Job SummaryJob SummaryJob SummaryJob SummaryThe PAM professional is responsible for assessing the existing privileged access landscape, performing gap analysis against security standards and best practices, gathering and translating business and technical requirements, and designing, implementing, and optimizing PAM solutions across on‑premises, cloud, and hybrid environments. The role plays a critical part in reducing cyber risk, ensuring regulatory compliance, and enabling secure privileged access.The PAM professional is responsible for assessing the existing privileged access landscape, performing gap analysis against security standards and best practices, gathering and translating business and technical requirements, and designing, implementing, and optimizing PAM solutions across on‑premises, cloud, and hybrid environments. The role plays a critical part in reducing cyber risk, ensuring regulatory compliance, and enabling secure privileged access.The PAM professional is responsible for assessing the existing privileged access landscape, performing gap analysis against security standards and best practices, gathering and translating business and technical requirements, and designing, implementing, and optimizing PAM solutions across on‑premises, cloud, and hybrid environments. The role plays a critical part in reducing cyber risk, ensuring regulatory compliance, and enabling secure privileged access.Key ResponsibilitiesKey ResponsibilitiesKey ResponsibilitiesKey Responsibilities1. Existing Environment Assessment1. Existing Environment Assessment1. Existing Environment Assessment· Perform detailed discovery and assessment of current privileged access usage across:· Perform detailed discovery and assessment of current privileged access usage across:· Perform detailed discovery and assessment of current privileged access usage across:o Servers (Windows, Unix/Linux)o Servers (Windows, Unix/Linux)o Servers (Windows, Unix/Linux)o Databaseso Databaseso Databaseso Network deviceso Network deviceso Network deviceso Cloud platforms (AWS, Azure, GCP)o Cloud platforms (AWS, Azure, GCP)o Cloud platforms (AWS, Azure, GCP)o Applications and DevOps pipelineso Applications and DevOps pipelineso Applications and DevOps pipelines· Identify and document:· Identify and document:· Identify and document:o Privileged user accounts (human and non‑human)o Privileged user accounts (human and non‑human)o Privileged user accounts (human and non‑human)o Service and application accountso Service and application accountso Service and application accountso Shared, orphaned, and unmanaged privileged credentialso Shared, orphaned, and unmanaged privileged credentialso Shared, orphaned, and unmanaged privileged credentialso Current access workflows and approval mechanismso Current access workflows and approval mechanismso Current access workflows and approval mechanisms· Review existing controls related to:· Review existing controls related to:· Review existing controls related to:o Identity and Access Management (IAM)o Identity and Access Management (IAM)o Identity and Access Management (IAM)o Password policies and rotation practiceso Password policies and rotation practiceso Password policies and rotation practiceso Logging, monitoring, and audit mechanismso Logging, monitoring, and audit mechanismso Logging, monitoring, and audit mechanisms· Analyze integration points with:· Analyze integration points with:· Analyze integration points with:o Active Directory / LDAPo Active Directory / LDAPo Active Directory / LDAPo SIEM, SOARo SIEM, SOARo SIEM, SOARo ITSM tools (e.g., ServiceNow)o ITSM tools (e.g., ServiceNow)o ITSM tools (e.g., ServiceNow)o MFA and authentication serviceso MFA and authentication serviceso MFA and authentication services2. Gap Analysis2. Gap Analysis2. Gap Analysis2. Gap Analysis· Conduct gap analysis between the existing PAM posture and:· Conduct gap analysis between the existing PAM posture and:· Conduct gap analysis between the existing PAM posture and:o Industry best practiceso Industry best practiceso Industry best practiceso Zero Trust principleso Zero Trust principleso Zero Trust principleso Standards such as ISO 27001, NIST, CIS, SOX, GDPR (as applicable)o Standards such as ISO 27001, NIST, CIS, SOX, GDPR (as applicable)o Standards such as ISO 27001, NIST, CIS, SOX, GDPR (as applicable)· Identify gaps related to:· Identify gaps related to:· Identify gaps related to:o Excessive or standing privileged accesso Excessive or standing privileged accesso Excessive or standing privileged accesso Lack of credential vaultingo Lack of credential vaultingo Lack of credential vaultingo Absence of session monitoring and recordingo Absence of session monitoring and recordingo Absence of session monitoring and recordingo Manual or weak access request and approval processeso Manual or weak access request and approval processeso Manual or weak access request and approval processeso Non‑compliant password and secret managemento Non‑compliant password and secret managemento Non‑compliant password and secret management· Document risk impact, severity, and remediation recommendations· Document risk impact, severity, and remediation recommendations· Document risk impact, severity, and remediation recommendations· Provide clear, prioritized gap analysis reports for technical and executive stakeholders· Provide clear, prioritized gap analysis reports for technical and executive stakeholders· Provide clear, prioritized gap analysis reports for technical and executive stakeholders3. Requirement Gathering3. Requirement Gathering3. Requirement Gathering3. Requirement Gathering· Engage with stakeholders including:· Engage with stakeholders including:· Engage with stakeholders including:o IT Infrastructure and Operationso IT Infrastructure and Operationso IT Infrastructure and Operationso Security Operations (SOC)o Security Operations (SOC)o Security Operations (SOC)o Application ownerso Application ownerso Application ownerso Cloud and DevOps teamso Cloud and DevOps teamso Cloud and DevOps teamso Compliance, Risk, and Audit teamso Compliance, Risk, and Audit teamso Compliance, Risk, and Audit teams· Collect and document:· Collect and document:· Collect and document:o Functional requirements (access control, session management, reporting)o Functional requirements (access control, session management, reporting)o Functional requirements (access control, session management, reporting)o Non‑functional requirements (availability, scalability, performance)o Non‑functional requirements (availability, scalability, performance)o Non‑functional requirements (availability, scalability, performance)o Regulatory and audit requirementso Regulatory and audit requirementso Regulatory and audit requirementso Business and operational constraintso Business and operational constraintso Business and operational constraints· Define:· Define:· Define:o Privileged access use caseso Privileged access use caseso Privileged access use caseso User roles and responsibilitieso User roles and responsibilitieso User roles and responsibilitieso Just‑In‑Time (JIT) access modelso Just‑In‑Time (JIT) access modelso Just‑In‑Time (JIT) access modelso Approval workflows and lifecycle managemento Approval workflows and lifecycle managemento Approval workflows and lifecycle management· Produce Business Requirement Documents (BRD) and Technical Requirement Specifications (TRS)· Produce Business Requirement Documents (BRD) and Technical Requirement Specifications (TRS)· Produce Business Requirement Documents (BRD) and Technical Requirement Specifications (TRS)4. PAM Solution Design & Implementation4. PAM Solution Design & Implementation4. PAM Solution Design & Implementation4. PAM Solution Design & Implementation· Design PAM architecture aligned with enterprise security strategy· Design PAM architecture aligned with enterprise security strategy· Design PAM architecture aligned with enterprise security strategy· Implement PAM solutions such as:· Implement PAM solutions such as:· Implement PAM solutions such as:o CyberArk, BeyondTrust, Delinea, or equivalent platformso CyberArk, BeyondTrust, Delinea, or equivalent platformso CyberArk, BeyondTrust, Delinea, or equivalent platforms· Configure:· Configure:· Configure:o Privileged credential vaultingo Privileged credential vaultingo Privileged credential vaultingo Password rotation and secrets managemento Password rotation and secrets managemento Password rotation and secrets managemento Session brokering, monitoring, and recordingo Session brokering, monitoring, and recordingo Session brokering, monitoring, and recordingo Role‑based access control and policy enforcemento Role‑based access control and policy enforcemento Role‑based access control and policy enforcement· Integrate PAM with:· Integrate PAM with:· Integrate PAM with:o Directory serviceso Directory serviceso Directory serviceso MFA solutionso MFA solutionso MFA solutionso SIEM/SOC platformso SIEM/SOC platformso SIEM/SOC platformso ITSM systems for access request workflowso ITSM systems for access request workflowso ITSM systems for access request workflows· Support phased onboarding of:· Support phased onboarding of:· Support phased onboarding of:o Infrastructure componentso Infrastructure componentso Infrastructure componentso Applicationso Applicationso Applicationso Cloud workloadso Cloud workloadso Cloud workloads· Ensure minimal business disruption during rollout· Ensure minimal business disruption during rollout· Ensure minimal business disruption during rollout5. Testing, Validation & Go‑Live Support5. Testing, Validation & Go‑Live Support5. Testing, Validation & Go‑Live Support5. Testing, Validation & Go‑Live Support· Perform:· Perform:· Perform:o Functional and security testingo Functional and security testingo Functional and security testingo User acceptance testing (UAT)o User acceptance testing (UAT)o User acceptance testing (UAT)· Validate:· Validate:· Validate:o Access control logico Access control logico Access control logico Audit logs and session recordingso Audit logs and session recordingso Audit logs and session recordingso Failover and resilience scenarioso Failover and resilience scenarioso Failover and resilience scenarios· Support production rollout and hypercare phases· Support production rollout and hypercare phases· Support production rollout and hypercare phases· Troubleshoot implementation and operational issues· Troubleshoot implementation and operational issues· Troubleshoot implementation and operational issues6. Documentation & Knowledge Transfer6. Documentation & Knowledge Transfer6. Documentation & Knowledge Transfer6. Documentation & Knowledge Transfer· Create and maintain:· Create and maintain:· Create and maintain:o Architecture diagramso Architecture diagramso Architecture diagramso Configuration and build documentso Configuration and build documentso Configuration and build documentso Standard operating procedures (SOPs)o Standard operating procedures (SOPs)o Standard operating procedures (SOPs)· Deliver knowledge transfer sessions to:· Deliver knowledge transfer sessions to:· Deliver knowledge transfer sessions to:o Operations teamso Operations teamso Operations teamso Security teamso Security teamso Security teamso Application support teamso Application support teamso Application support teams7. Governance, Compliance & Continuous Improvement7. Governance, Compliance & Continuous Improvement7. Governance, Compliance & Continuous Improvement7. Governance, Compliance & Continuous Improvement· Ensure PAM controls support:· Ensure PAM controls support:· Ensure PAM controls support:o Internal security policieso Internal security policieso Internal security policieso Regulatory and audit requirementso Regulatory and audit requirementso Regulatory and audit requirements· Assist in audit responses and evidence generation· Assist in audit responses and evidence generation· Assist in audit responses and evidence generation· Identify opportunities for process improvement and automation· Identify opportunities for process improvement and automation· Identify opportunities for process improvement and automation· Support ongoing PAM maturity and optimization initiatives· Support ongoing PAM maturity and optimization initiatives· Support ongoing PAM maturity and optimization initiativesRequired Skills & ExperienceRequired Skills & ExperienceRequired Skills & ExperienceRequired Skills & ExperienceTechnical SkillsTechnical SkillsTechnical SkillsTechnical Skills· Strong understanding of PAM concepts and privileged identity security· Strong understanding of PAM concepts and privileged identity security· Strong understanding of PAM concepts and privileged identity securityPAM concepts and privileged identity security· Experience with PAM tools (CyberArk, BeyondTrust, Delinea, Azure PIM, etc.)· Experience with PAM tools (CyberArk, BeyondTrust, Delinea, Azure PIM, etc.)· Experience with PAM tools (CyberArk, BeyondTrust, Delinea, Azure PIM, etc.)· Knowledge of:· Knowledge of:· Knowledge of:o Active Directory, LDAPo Active Directory, LDAPo Active Directory, LDAPo Windows, Linux/Unix systemso Windows, Linux/Unix systemso Windows, Linux/Unix systemso Networking fundamentalso Networking fundamentalso Networking fundamentalso Cloud security and IAMo Cloud security and IAMo Cloud security and IAM· Familiarity with security frameworks and standards· Familiarity with security frameworks and standards· Familiarity with security frameworks and standardsSoft SkillsSoft SkillsSoft SkillsSoft Skills· Strong stakeholder management and communication skills· Strong stakeholder management and communication skills· Strong stakeholder management and communication skills· Ability to translate business needs into technical solutions· Ability to translate business needs into technical solutions· Ability to translate business needs into technical solutions· Analytical mindset with strong documentation capabilities· Analytical mindset with strong documentation capabilities· Analytical mindset with strong documentation capabilities· Experience leading workshops and technical discussions· Experience leading workshops and technical discussions· Experience leading workshops and technical discussionsExperience & QualificationsExperience & QualificationsExperience & QualificationsExperience & Qualifications· 5+ years in Identity & Access Management or Cybersecurity roles· 5+ years in Identity & Access Management or Cybersecurity roles· 5+ years in Identity & Access Management or Cybersecurity roles· 3+ years hands‑on experience in PAM projects· 3+ years hands‑on experience in PAM projects· 3+ years hands‑on experience in PAM projects· Certifications (preferred):· Certifications (preferred):· Certifications (preferred):o CISSP, CISMo CISSP, CISMo CISSP, CISMo CyberArk / BeyondTrust certificationso CyberArk / BeyondTrust certificationso CyberArk / BeyondTrust certificationsAbout Infosys