Cybersecurity Engineer - Privileged Access Management

About the role

Moody's is hiring a Cybersecurity Engineer for its Identity and Access Management team, which builds and operates a modern, scalable, secure identity and privileged access platform supporting its global workforce and technology ecosystem. The role is based in Bengaluru, India, and also listed for Gurugram, India, and focuses on designing, building and scaling secure, cloud-first identity and privileged access management solutions.

Key responsibilities

• Design, build and scale secure, cloud-first identity and privileged access management solutions that support a global enterprise and enable highly automated, reliable identity services.
• Design, develop and enhance IAM and PAM capabilities across authentication, authorization, identity governance and privileged access management.
• Build and maintain integrations using REST APIs, SCIM, web services and event-driven architectures.
• Implement and optimize identity lifecycle processes (provisioning, access requests, deprovisioning, certifications and privileged access reviews).
• Define and enforce access models and policies such as least privilege, Just-in-Time access and break-glass governance.
• Develop automation and reusable services such as credential vaulting and password rotation.
• Implement CI/CD pipelines, automated testing and version-controlled deployments for IAM and PAM solutions.
• Enhance observability through logging, monitoring, alerting, service health metrics and privileged session tracking.
• Troubleshoot complex issues, drive root cause analysis, use AI-driven automation for identity operations and anomaly detection, and work with security, engineering and product teams while keeping documentation, runbooks and audit/compliance records ready.

Required profile

• 3-7 years of IAM engineering experience, with 2+ years in direct Privileged Access Management in enterprise or regulated environments.
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering or a related field, or equivalent practical experience.
• Demonstrated proficiency in artificial intelligence concepts, with hands-on experience using AI tools to streamline workflows and proven ability to implement AI-powered solutions; growing awareness of AI risk management and responsible AI use.

Required skills

• Strong scripting in Python and PowerShell, with working knowledge of Java or similar languages.
• System integration with REST APIs, SCIM, webhooks and event-driven architectures, and authentication protocols (OAuth 2.0, mTLS, API keys, JWT, SAML, OIDC).
• Identity lifecycle management (JML, Active Directory lifecycle) and non-human identity security (service accounts, API keys, workload identities).
• PAM expertise: credential vaulting, password rotation, privileged session management, JIT and least privilege access, break-glass governance, access reviews, and RBAC/ABAC.
• Cloud platforms (Azure preferred, AWS/GCP) and DevOps tools (CI/CD, Git, Terraform, Helm, Kubernetes, Docker).
• Exposure to BeyondTrust, ServiceNow integrations and SailPoint is a plus.