{"id":656047,"url":"https://alion.io/job/ahead-identity-security-specialist-solutions-engineer","title":"Identity Security Specialist Solutions Engineer","company":{"id":3614,"name":"AHEAD","domain":"ahead.com","url":"https://alion.io/company/ahead","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":73,"open_postings":38,"ghost_share":0,"stale_share":0.868,"repost_share":0,"time_to_fill_p50_days":74,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":270000,"max":300000,"currency":"USD","period":"year","gross":null,"usd_annual":300000},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CyberArk","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"ITSM","optional":false},{"name":"Least Privilege","optional":false},{"name":"SIEM","optional":false},{"name":"Zero Trust","optional":false},{"name":"Active Directory","optional":true},{"name":"BeyondTrust","optional":true},{"name":"Delinea","optional":true},{"name":"HIPAA","optional":true},{"name":"Microsoft Entra ID","optional":true},{"name":"Okta","optional":true},{"name":"PCI DSS","optional":true}],"status":"live","first_seen_at":"2026-09-10T17:58:06Z","employer_posted_date":"2026-09-10","last_verified_at":"2026-11-04T15:08:11Z","board_verified":true,"closed_at":null,"days_open":55,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":55},"description":"AHEAD is hiring an Identity Security Specialist Solutions Engineer to serve as a national identity-security resource across AHEAD’s regions, account teams, delivery organization, and strategic partners.\nThis role specializes in CyberArk, Privileged Identity Management (PIM), and Privileged Access Management (PAM). The successful candidate will help customers assess privileged-access risk, design target-state architectures, select and size solutions, validate technical approaches, and build practical implementation roadmaps.\nThis is a customer-facing pre-sales and advisory role. The position shapes technical solutions, scopes services, supports proposals, and guides technical validation. Delivery teams own post-sale implementation and operational execution.\nResponsibilities\nServe as a national identity-security resource supporting qualified opportunities across AHEAD regions.\nLead advisory discovery, technical sales calls, identity-security assessments, architecture workshops, demonstrations, POVs/POCs, and executive briefings.\nDesign and present CyberArk-centered privileged-access architectures for workforce, administrator, vendor, service, machine, and non-human identities.\nAdvise customers on privileged-account discovery, vaulting, credential rotation, onboarding, session management, monitoring, just-in-time access, least privilege, break-glass access, and shared-account reduction.\nPartner with delivery leadership to ensure proposed solutions are implementable and aligned with AHEAD’s professional and managed services capabilities.\nCreate solution designs, configurations, sizing inputs, services proposals, statements of work, presentations, technical justifications, and customer roadmaps.\nProvide pricing and effort inputs for account and delivery teams; final commercial approval remains with the appropriate AHEAD leaders.\nQualify opportunities based on technical requirements, business outcomes, decision process, funding, and customer readiness.\nDefine CyberArk and adjacent identity-security strategies across on-premises, AWS, Azure, GCP, SaaS, and hybrid environments.\nConnect PIM/PAM strategy to IAM, IGA, MFA, SSO, ITDR, secrets management, cloud IAM, SIEM/SOAR, ITSM, and Zero Trust programs.\nWork with OEM field teams on technical alignment, enablement, certifications, and active customer campaigns.\nContribute reusable architectures, discovery guides, workshop content, competitive insights, and enablement materials.\nRequired Qualifications\n7+ years of experience in cybersecurity, identity, cloud, technology consulting, or solutions engineering, including at least 4 years focused on identity security.\nPrior customer-facing pre-sales, solutions engineering, consulting, or security-architecture experience.\nDemonstrated CyberArk experience in at least one enterprise program spanning two or more lifecycle stages, such as assessment, design, migration, implementation, integration, or operationalization.\nPractical expertise in PIM and PAM concepts, controls, workflows, and operating models.\nExperience creating customer-facing proposals, solution designs, SOWs, services proposals, or equivalent pre-sales artifacts.\nAbility to design and present identity-security architectures to technical practitioners and executive stakeholders.\nExperience integrating privileged access with enterprise identity, cloud, endpoint, security operations, and ITSM platforms.\nStrong written, verbal, whiteboarding, presentation, and customer-management skills.\nPreferred Qualifications\nCyberArk certification or equivalent demonstrated product expertise.\nExperience with CyberArk Privilege Cloud, PAM Self-Hosted, Endpoint Privilege Manager, Secrets Manager, or related capabilities.\nExperience with Microsoft Entra ID, Active Directory, Okta, SailPoint, Saviynt, Delinea, BeyondTrust, or comparable platforms.\nFamiliarity with identity threat detection and response, non-human identity, workload identity, and cloud entitlement management.\nConsulting experience at a systems integrator, professional services firm, advisory practice, or technology provider.\nDelivery experience standing up, configuring, migrating, or operationalizing privileged-access tooling.\nFamiliarity with NIST, CIS Controls, Zero Trust, SOX, PCI DSS, HIPAA, or other control frameworks relevant to privileged access.\nRelevant certifications such as CISSP, CCSP, CyberArk, GIAC, or equivalent.\nSuccess Measures: First 6-12 months\nEstablish trusted working relationships with Security Sales, account teams, delivery leaders, CyberArk, and adjacent partners.\nLead repeatable identity-security discovery and workshop motions that produce qualified opportunities and clear next steps.\nDemonstrate the ability to produce accurate solution designs, services proposals, and technical validation plans.\nBuild reusable CyberArk/PIM/PAM architectures, discovery assets, and enablement content.\nSupport successful transitions from pre-sales scope to delivery without material ambiguity in assumptions, dependencies, or customer outcomes.\nBehavioral Expectations\nExplains complex privileged-access concepts clearly to technical and executive audiences.\nUses specific customer evidence to connect technical design to risk reduction, operational improvement, and business value.\nFacilitates alignment across security, identity, infrastructure, cloud, audit, and operations stakeholders.\nCommunicates assumptions, dependencies, risks, and decisions clearly in written and verbal form.\nWorks effectively in a matrixed national organization with multiple account teams, delivery groups, and OEM partners.\nMaintains professional judgment when customer requirements, product capabilities, or commercial constraints conflict.","description_format":"text","description_chars":5712,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","Managed IT Services (MSP)","AI Consulting & Integration","Cloud Consulting & Migration"],"lifecycle":[{"event":"open","at":"2026-09-10T21:02:53Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 23 · green card filings: 4","filings_12m":23,"filings_prev_12m":21,"green_card_filings_12m":4,"median_offered_wage_usd":151759,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":2}],"liveness":{"score":41,"band":"fade","label":"Fading","p_open":1,"p_active":0.548,"p_room":0.75,"age_days":54,"expected_fill_days":74,"reasons":["conf:0","stale_co","velocity","win:late","comp:brand"],"computed_at":"2026-11-04T06:34:25Z"},"pay":{"stated_usd_annual":300000,"is_top_pay":true},"html_url":"https://alion.io/job/ahead-identity-security-specialist-solutions-engineer","json_url":"https://alion.io/job/ahead-identity-security-specialist-solutions-engineer.json","meta":{"generated_at":"2026-11-04T19:50:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":30543,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3614},"rest":"https://alion.io/mcp/rest/get_company?id=3614"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fahead-identity-security-specialist-solutions-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fahead-identity-security-specialist-solutions-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fahead-identity-security-specialist-solutions-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ahead-identity-security-specialist-solutions-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fahead-identity-security-specialist-solutions-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":656047}},{"tool":"search_jobs","arguments":{"company":"ahead.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":656047},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}