Senior Technical Consultant, Security

AHEAD is seeking a senior, customer-facing Technical Consultant to lead delivery of Idira Privilege Cloud (formerly CyberArk Privilege Cloud) implementations. You will own technical workstreams from discovery and design through configuration, integration, testing, and handoff. You will advise customer security, identity, and infrastructure teams, resolve complex implementation issues, and help raise the technical quality of the broader delivery team.

Idira Privilege Cloud is a SaaS privileged-access solution for safeguarding credentials, automating password rotation, and monitoring privileged sessions.

Responsibilities:

• Lead technical discovery and translate customer requirements into implementable Privilege Cloud designs, deployment plans, and delivery estimates.
• Own one or more technical workstreams through implementation, integration, testing, issue resolution, documentation, and operational handoff.
• Design and configure core PAM capabilities, including safes, accounts, platforms, access controls, password rotation and reconciliation policies, and privileged-session workflows.
• Lead deployment and troubleshooting of Privilege Cloud connectors and related components, including CPM, PSM, and SSH-based access, in coordination with customer infrastructure teams.
• Plan and oversee onboarding of privileged accounts across Windows, Linux/Unix, directory services, databases, network devices, and business applications.
• Lead integrations with customer identity providers and directory services, including authentication, user and group mapping, and access-model troubleshooting.
• Diagnose complex issues spanning the Idira platform and customer infrastructure; coordinate with vendor or customer teams, communicate impact and options, and drive issues to resolution.
• Review implementation decisions and deliverables for security, operability, and alignment with customer requirements and established practices.
• Serve as a trusted technical contact for customer stakeholders; communicate risks, assumptions, dependencies, and recommendations clearly.
• Coach and support other consultants through design reviews, troubleshooting, knowledge sharing, and practical delivery guidance.
• Contribute technical input to scoping, solution proposals, project plans, and knowledge assets; collaborate with AHEAD architects, project managers, and delivery colleagues across regions.
• Support project travel and reasonable time-zone overlap when required for customer delivery.

Required Qualifications:

• 5+ years of experience in technical consulting, systems engineering, cybersecurity, identity, or privileged access management, including substantial customer-facing delivery.
• 3+ years of hands-on implementation or administration experience with Idira/CyberArk Privilege Cloud or CyberArk PAM.
• Demonstrated ownership of PAM implementation workstreams, including privileged account onboarding, access policies, credential rotation and reconciliation, and/or session management.
• Ability to lead technical discovery, make and explain implementation decisions, and manage delivery dependencies with limited day-to-day oversight.
• Strong working knowledge of Windows Server and Linux/Unix administration, networking fundamentals, DNS, firewalls, certificates, and secure connectivity.
• Experience diagnosing complex integrations across enterprise infrastructure and producing clear technical designs, runbooks, test plans, and handoff documentation.
• Strong customer communication, facilitation, and stakeholder-management skills; able to explain technical tradeoffs to both engineering and non-technical audiences.
• Demonstrated ability to mentor peers, lead technical reviews, and collaborate effectively with distributed delivery teams.

Certification:

Applicants must hold at least one current, relevant Idira/CyberArk Privilege Cloud credential or delivery certification. Preferred credentials include:

• CDE-CPC - CyberArk Certified Delivery Engineer, Privilege Cloud.
• CPC-SEN - Sentry - Privilege Cloud.
• Another current, vendor-recognized CPC or CDE credential relevant to Privilege Cloud/PAM may be considered.

Candidates with a related CyberArk PAM CDE credential and demonstrable senior-level Privilege Cloud delivery experience may also be considered. Certification names and availability can change; validate the credential title against the current Idira/CyberArk University certification catalog before publishing the posting.

Nice to Have Skills:

• Active Directory: domains, users and groups, service accounts, Group Policy, and domain-joined systems.
• LDAP concepts and directory integrations.
• Advanced Windows Server and Linux/Unix troubleshooting, scripting, and service management.
• Database fundamentals, including accounts, permissions, connectivity, and credential rotation for common relational databases.
• Scripting or automation with PowerShell, Python, Bash, or REST APIs.
• Experience with SIEM integration, audit requirements, secrets management, or enterprise security controls.
• Familiarity with cloud and hybrid environments, virtualization, and network/security appliances.
• Experience contributing to solution scoping, effort estimates, architecture diagrams, and customer-facing proposals.

What success looks like:

• Technical workstreams are delivered with clear ownership, sound implementation decisions, and predictable communication of risks and dependencies.
• Customer environments meet agreed requirements and are documented for secure, sustainable operations.
• Privileged accounts and systems are onboarded with appropriate access, rotation, and session controls.
• Complex technical issues are resolved efficiently, with appropriate customer and vendor coordination.
• Customer administrators can confidently operate the delivered solution after handoff, and less-experienced consultants benefit from the senior consultant’s technical guidance.