Senior CyberArk Privileged Access Management Consultant

Consultant - Cyber Consulting - CyberArk

Job Title: CyberArk PAM Consultant

Overview: We are seeking a Senior CyberArk Implementation Consultant to deliver end-to-end CyberArk implementations across hybrid environments (on‑premises and cloud). This role is hands-on and delivery-focused, responsible for leading workstreams, designing solutions, configuring CyberArk PAM and Secrets capabilities, and driving successful go-lives. The consultant works closely with customer stakeholders across security, infrastructure, and application teams to onboard privileged identities, implement session controls, and enable modern secrets management using CyberArk Secrets Manager and Conjur. CyberArk certification is preferred.

• Lead delivery of CyberArk workstreams (PAM and/or Secrets) including requirements, design, build, testing, and deployment.
• Facilitate discovery workshops to capture privileged access and secrets use cases and translate them into implementable technical designs.
• Install and configure CyberArk PAM components as applicable: Vault, PVWA, CPM, PSM/PSMP; implement hardening and certificate standards.
• Onboard privileged accounts across Windows, Linux/Unix, databases, network devices, and applications; define safes, roles, permissions, platforms, and rotation policies.
• Implement PSM/PSMP for session governance including access policies, session recording, and troubleshooting connectivity and component behavior.
• Implement CyberArk access capabilities (as applicable): SIA, SWS, and SCA; define policies and validate secure user journeys.
• Design and implement secrets management using CyberArk Secrets Manager and Conjur (policies, auth methods, retrieval patterns, and rotation workflows).
• Integrate secrets management with CI/CD and/or Kubernetes/OpenShift as required; support migration from hardcoded secrets.
• Integrate CyberArk with enterprise services: AD/LDAP, MFA/SSO, SIEM (e.g., Splunk/QRadar), and ITSM (e.g., ServiceNow) including ticket/approval workflows.
• Create and execute test plans (SIT/UAT) and support cutover/hypercare activities.
• Build automation using REST APIs, PowerShell, and/or Python for onboarding, validation, reporting, and compliance evidence.
• Produce delivery documentation: HLD/LLD, implementation plan, as-built documents, SOPs/runbooks, and KT materials.
• Contribute to reusable accelerators and standards.

• Bachelor’s degree in Computer Science / IT / Information Security (or equivalent practical experience).
• 5+ years in IAM/PAM with 4+ years of hands-on CyberArk implementation experience.
• Strong hands-on experience with CyberArk PAM core: Vault, PVWA, CPM, and PSM/PSMP.
• CyberArk Certifications: CDE-PAM / CDE-CPC.
• Hands-on proficiency with CyberArk capabilities/products: SIA, SWS, SCA.
• Hands-on proficiency with CyberArk secrets solutions: CyberArk Secrets Manager and Conjur (implementation and integration).
• Strong fundamentals: Windows/Linux administration, AD/LDAP, TLS/certificates, and networking (DNS, firewall rules, routing, load balancers).
• Scripting skills: PowerShell preferred; Python and REST APIs.
• Experience delivering large-scale onboarding programs and multi-application secrets migration initiatives.
• Strong communication, documentation, troubleshooting, and stakeholder management skills.

Experience Level

Senior Level