Job Description
This is a remote position.
Position Summary
We are seeking a Senior CyberArk Identity and Access Management (IAM) Consultant to lead the design, implementation, optimization, and support of CyberArk Privileged Access Management (PAM) solutions for enterprise clients. The ideal candidate will possess deep expertise in CyberArk technologies, privileged identity governance, and enterprise security architecture. This role requires a hands-on consultant capable of leading technical engagements while serving as a trusted advisor to client stakeholders.
Primary Responsibilities
Design, implement, configure, and support CyberArk Privileged Access Management (PAM) solutions.
Lead CyberArk deployment projects from planning through production implementation.
Integrate CyberArk with Active Directory, Azure AD (Microsoft Entra ID), LDAP, cloud platforms, and enterprise applications.
Configure and maintain CyberArk components including:
Privileged Access Manager (PAM)
Password Vault Web Access (PVWA)
Central Policy Manager (CPM)
Privileged Session Manager (PSM)
Privileged Threat Analytics (PTA)
CyberArk Identity
Secrets Manager / Conjur
Develop onboarding strategies for privileged accounts, applications, databases, and service accounts.
Create and maintain password rotation policies and privileged access workflows.
Design secure privileged session management and monitoring capabilities.
Troubleshoot complex CyberArk infrastructure and integration issues.
Perform CyberArk upgrades, patching, and system health assessments.
Develop operational documentation, runbooks, and standard operating procedures.
Mentor junior engineers and provide technical leadership during project execution.
Participate in architecture reviews and security strategy discussions.
Provide knowledge transfer and client training following project completion.
Required Technical Skills
CyberArk
CyberArk PAM
Password Vault Web Access (PVWA)
Central Policy Manager (CPM)
Privileged Session Manager (PSM)
Privileged Threat Analytics (PTA)
CyberArk Identity
CyberArk Conjur
Secrets Manager
Identity & Access Management
Active Directory
Microsoft Entra ID (Azure AD)
LDAP
SAML
OAuth
OpenID Connect (OIDC)
Kerberos
RADIUS
Multi-Factor Authentication (MFA)
Infrastructure
Windows Server
Linux Administration
VMware
Microsoft SQL Server
IIS
DNS
PKI / Certificates
Networking fundamentals
Cloud Platforms
Microsoft Azure
AWS
Google Cloud Platform (GCP)
Automation
PowerShell
REST APIs
Python (preferred)
Ansible (preferred)
Terraform (preferred)
Cybersecurity Knowledge
NIST Cybersecurity Framework (CSF) 2.0
MITRE ATT&CK Framework
Security Operations (SIEM)
Identity & Access Management
Endpoint Security
Data Security
Threat Protection
Security strategy and roadmap development
Required Experience
7–10+ years of Identity and Access Management experience.
5+ years of hands-on CyberArk engineering and administration.
Experience leading CyberArk implementation or migration projects.
Strong understanding of privileged identity lifecycle management.
Experience securing service accounts, application credentials, and privileged sessions.
Experience integrating CyberArk with enterprise applications and cloud environments.
Strong troubleshooting and root cause analysis skills.
Experience working in enterprise or highly regulated environments.
Desired Knowledge
Zero Trust Architecture
NIST Cybersecurity Framework (CSF)
NIST SP 800-53
CIS Controls
Identity Governance and Administration (IGA)
Privileged Identity Management (PIM)
Role-Based Access Control (RBAC)
Least Privilege Principles
Regulatory compliance frameworks (PCI DSS, HIPAA, SOX, ISO 27001)
Ideal Candidate Profile
The ideal candidate is a senior-level IAM consultant who combines deep CyberArk expertise with strong consulting, architecture, and client engagement skills. They should be comfortable leading technical implementations, advising executive stakeholders on privileged access strategies, and delivering secure, scalable PAM solutions that align with Zero Trust principles and organizational security objectives.