Job SummaryThe PAM professional is responsible for assessing the existing privileged access landscape, performing gap analysis against security standards and best practices, gathering and translating business and technical requirements, and designing, implementing, and optimizing PAM solutions across on‑premises, cloud, and hybrid environments. The role plays a critical part in reducing cyber risk, ensuring regulatory compliance, and enabling secure privileged access.Key Responsibilities Existing Environment Assessment Perform detailed discovery and assessment of current privileged access usage across: Servers (Windows, Unix/Linux) Databases Network devices Cloud platforms (AWS, Azure, GCP) Applications and DevOps pipelines Identify and document: Privileged user accounts (human and non‑human) Service and application accounts Shared, orphaned, and unmanaged privileged credentials Current access workflows and approval mechanisms Review existing controls related to: Identity and Access Management (IAM) Password policies and rotation practices Logging, monitoring, and audit mechanisms Analyze integration points with: Active Directory / LDAP SIEM, SOAR ITSM tools (e.g., ServiceNow) MFA and authentication services Gap Analysis Conduct gap analysis between the existing PAM posture and: Industry best practices Zero Trust principles Standards such as ISO 27001, NIST, CIS, SOX, GDPR (as applicable) Identify gaps related to: Excessive or standing privileged access Lack of credential vaulting Absence of session monitoring and recording Manual or weak access request and approval processes Non‑compliant password and secret management Document risk impact, severity, and remediation recommendations Provide clear, prioritized gap analysis reports for technical and executive stakeholders Requirement Gathering Engage with stakeholders including: IT Infrastructure and Operations Security Operations (SOC) Application owners Cloud and DevOps teams Compliance, Risk, and Audit teams Collect and document: Functional requirements (access control, session management, reporting) Non‑functional requirements (availability, scalability, performance) Regulatory and audit requirements Business and operational constraints Define: Privileged access use cases User roles and responsibilities Just‑In‑Time (JIT) access models Approval workflows and lifecycle management Produce Business Requirement Documents (BRD) and Technical Requirement Specifications (TRS) PAM Solution Design & Implementation Design PAM architecture aligned with enterprise security strategy Implement PAM solutions such as: CyberArk, BeyondTrust, Delinea, or equivalent platforms Configure: Privileged credential vaulting Password rotation and secrets management Session brokering, monitoring, and recording Role‑based access control and policy enforcement Integrate PAM with: Directory services MFA solutions SIEM/SOC platforms ITSM systems for access request workflows Support phased onboarding of: Infrastructure components Applications Cloud workloads Ensure minimal business disruption during rollout Testing, Validation & Go‑Live Support Perform: Functional and security testing User acceptance testing (UAT) Validate: Access control logic Audit logs and session recordings Failover and resilience scenarios Support production rollout and hypercare phases Troubleshoot implementation and operational issues Documentation & Knowledge Transfer Create and maintain: Architecture diagrams Configuration and build documents Standard operating procedures (SOPs) Deliver knowledge transfer sessions to: Operations teams Security teams Application support teams Governance, Compliance & Continuous Improvement Ensure PAM controls support: Internal security policies Regulatory and audit requirements Assist in audit responses and evidence generation Identify opportunities for process improvement and automation Support ongoing PAM maturity and optimization initiativesTechnical SkillsRequired Skills & Experience Strong understanding of PAM concepts and privileged identity security Experience with PAM tools (CyberArk, BeyondTrust, Delinea, Azure PIM, etc.) Knowledge of: Active Directory, LDAP Windows, Linux/Unix systems Networking fundamentals Cloud security and IAM Familiarity with security frameworks and standardsSoft Skills Strong stakeholder management and communication skills Ability to translate business needs into technical solutions Analytical mindset with strong documentation capabilities Experience leading workshops and technical discussionsExperience & Qualifications 5+ years in Identity & Access Management or Cybersecurity roles 3+ years hands‑on experience in PAM projects Certifications (preferred): CISSP, CISM CyberArk / BeyondTrust certificationsAbout InfosysInfosys is a global leader in next-generation digital services and consulting. We enable clients in 59 countries to navigate their digital transformation.With over four decades of experience in managing the systems and workings of global enterprises, we expertly steer clients, in 59 countries, as they navigate their digital transformation powered by cloud and AI. We enable them with an AI-first core, empower the business with agile digital at scale and drive continuous improvement with always-on learning through the transfer of digital skills, expertise, and ideas from our innovation ecosystem. We are deeply committed to being a well-governed, environmentally sustainable organization where diverse talent thrives in an inclusive workplace. Show more Show less