Senior Consultant (Privileged Access Management)

• Join our team as a Senior Consultant specializing in Privileged Access Management (PAM).
• BT Privileged Remote Access BCIE
• BT Privileged Management for Windows BCIE

Responsibilities

• In this hands-on technical consulting role, you will design, implement, integrate, support, and optimize enterprise PAM solutions for our clients.
• You will lead technical discovery sessions, implement and support privileged account onboarding, and configure and maintain platform components.
• You will also troubleshoot PAM platform issues, produce technical documentation, and communicate technical concepts clearly to client stakeholders.
• Additionally, you will mentor junior consultants and contribute to technical knowledge sharing and continuous improvement across the PAM practice.
• Concevoir, mettre en œuvre, intégrer, soutenir et optimiser des solutions PAM d'entreprise pour les clients.
• Diriger et contribuer à la conception, à la configuration, à l'intégration, au déploiement et au soutien continu des solutions PAM d'entreprise.
• Mener des sessions de découverte technique et traduire les exigences de sécurité et techniques en conceptions PAM pratiques.
• Other relevant PAM, identity security, cloud, infrastructure or cybersecurity certifications are advantageous
• Experience preparing technical documentation and supporting testing, deployment, operational handover and ongoing platform support
• Experience integrating PAM platforms with directories, servers, databases, cloud environments, applications and enterprise security or operations tooling
• Strong hands-on implementation and support experience in at least one of Idira (previously known as CyberArk) or BeyondTrust
• Strong troubleshooting and problem-solving skills across PAM components, integrations, privileged sessions and credential-management processes
• BT Remote Support BCIE
• AD Bridge Administration Course

Requirements

• Equivalent practical experience will be considered alongside formal qualifications and certifications
• The successful candidate will bring approximately 5 years of relevant PAM implementation, engineering, support or technical consulting experience, with strong hands-on expertise in either Idira (previously known as CyberArk) or BeyondTrust. Expertise in both technologies is advantageous but is not required
• Approximately 5 years of relevant professional experience in PAM, enterprise security implementation/support, systems integration or technical consulting
• BeyondTrust: hands-on delivery with one or more relevant BeyondTrust PAM technologies such as Password Safe, Privileged Remote Access, Endpoint Privilege Management, Remote Support or AD Bridge. Experience configuring access policies, secure remote access, credential management, integrations and platform administration is advantageous
• Confident client-facing communication skills, including the ability to run technical workshops
• Practical understanding of PAM principles including least privilege, privileged credential management, password rotation, secure session management, privileged account onboarding, access control and auditing
• Idira (previously known as CyberArk): hands-on delivery with Privileged Access Manager Self-Hosted and/or Privilege Cloud, including privileged account management, secure vaulting, session management and credential rotation. Experience with components such as PSM, CPM and PSM for SSH, platform configuration, connectors/plugins and relevant authentication or SIEM integrations is advantageous
• Ability to work independently, prioritise delivery tasks and contribute effectively across multiple client engagements
• Idira (previously known as CyberArk) specialism
• CDE-PAM
• BeyondTrust specialism
• CDE-CPC

Privileged Management for Unix/Linux Administration Course

• Vendor certifications are advantageous but are not essential. Strong hands-on PAM delivery experience remains the primary requirement
• Experience across both Idira and BeyondTrust, or another enterprise PAM platform
• Experience with Microsoft Azure, AWS or other cloud environments

Preferred

• Experience with SIEM, ITSM and directory integrations such as Active Directory/LDAP
• Experience with privileged access assessments, platform health checks, upgrades or remediation activities
• Experience with scripting or development used in PAM integrations, plugins, connectors or automation, such as PowerShell, C#, Java or APIs
• Experience mentoring junior consultants or contributing to reusable technical assets and delivery standards