AHEAD builds platforms for digital business. By weaving together advances in cloud infrastructure, automation and analytics, and software delivery, we help enterprises deliver on the promise of digital transformation.
At AHEAD, we prioritize creating a culture of belonging, where all perspectives and voices are represented, valued, respected, and heard. We create spaces to empower everyone to speak up, make change, and drive the culture at AHEAD.
We are an equal opportunity employer, and do not discriminate based on an individual's race, national origin, color, gender, gender identity, gender expression, sexual orientation, religion, age, disability, marital status, or any other protected characteristic under applicable law, whether actual or perceived.
We embrace all candidates that will contribute to the diversification and enrichment of ideas and perspectives at AHEAD.
AHEAD is seeking a senior, customer-facing Technical Consultant to lead delivery of Idira Privilege Cloud (formerly CyberArk Privilege Cloud) implementations. You will own technical workstreams from discovery and design through configuration, integration, testing, and handoff. You will advise customer security, identity, and infrastructure teams, resolve complex implementation issues, and help raise the technical quality of the broader delivery team.
Idira Privilege Cloud is a SaaS privileged-access solution for safeguarding credentials, automating password rotation, and monitoring privileged sessions.
Responsibilities:
- Lead technical discovery and translate customer requirements into implementable Privilege Cloud designs, deployment plans, and delivery estimates.
- Own one or more technical workstreams through implementation, integration, testing, issue resolution, documentation, and operational handoff.
- Design and configure core PAM capabilities, including safes, accounts, platforms, access controls, password rotation and reconciliation policies, and privileged-session workflows.
- Lead deployment and troubleshooting of Privilege Cloud connectors and related components, including CPM, PSM, and SSH-based access, in coordination with customer infrastructure teams.
- Plan and oversee onboarding of privileged accounts across Windows, Linux/Unix, directory services, databases, network devices, and business applications.
- Lead integrations with customer identity providers and directory services, including authentication, user and group mapping, and access-model troubleshooting.
- Diagnose complex issues spanning the Idira platform and customer infrastructure; coordinate with vendor or customer teams, communicate impact and options, and drive issues to resolution.
- Review implementation decisions and deliverables for security, operability, and alignment with customer requirements and established practices.
- Serve as a trusted technical contact for customer stakeholders; communicate risks, assumptions, dependencies, and recommendations clearly.
- Coach and support other consultants through design reviews, troubleshooting, knowledge sharing, and practical delivery guidance.
- Contribute technical input to scoping, solution proposals, project plans, and knowledge assets; collaborate with AHEAD architects, project managers, and delivery colleagues across regions.
- Support project travel and reasonable time-zone overlap when required for customer delivery.
Required Qualifications:
- 5+ years of experience in technical consulting, systems engineering, cybersecurity, identity, or privileged access management, including substantial customer-facing delivery.
- 3+ years of hands-on implementation or administration experience with Idira/CyberArk Privilege Cloud or CyberArk PAM.
- Demonstrated ownership of PAM implementation workstreams, including privileged account onboarding, access policies, credential rotation and reconciliation, and/or session management.
- Ability to lead technical discovery, make and explain implementation decisions, and manage delivery dependencies with limited day-to-day oversight.
- Strong working knowledge of Windows Server and Linux/Unix administration, networking fundamentals, DNS, firewalls, certificates, and secure connectivity.
- Experience diagnosing complex integrations across enterprise infrastructure and producing clear technical designs, runbooks, test plans, and handoff documentation.
- Strong customer communication, facilitation, and stakeholder-management skills; able to explain technical tradeoffs to both engineering and non-technical audiences.
- Demonstrated ability to mentor peers, lead technical reviews, and collaborate effectively with distributed delivery teams.
Certification:
Applicants must hold at least one current, relevant Idira/CyberArk Privilege Cloud credential or delivery certification. Preferred credentials include:
- CDE-CPC — CyberArk Certified Delivery Engineer, Privilege Cloud.
- CPC-SEN — Sentry – Privilege Cloud.
- Another current, vendor-recognized CPC or CDE credential relevant to Privilege Cloud/PAM may be considered.
Candidates with a related CyberArk PAM CDE credential and demonstrable senior-level Privilege Cloud delivery experience may also be considered. Certification names and availability can change; validate the credential title against the current Idira/CyberArk University certification catalog before publishing the posting.
Nice to Have Skills:
- Active Directory: domains, users and groups, service accounts, Group Policy, and domain-joined systems.
- LDAP concepts and directory integrations.
- Advanced Windows Server and Linux/Unix troubleshooting, scripting, and service management.
- Database fundamentals, including accounts, permissions, connectivity, and credential rotation for common relational databases.
- Scripting or automation with PowerShell, Python, Bash, or REST APIs.
- Experience with SIEM integration, audit requirements, secrets management, or enterprise security controls.
- Familiarity with cloud and hybrid environments, virtualization, and network/security appliances.
- Experience contributing to solution scoping, effort estimates, architecture diagrams, and customer-facing proposals.
What success looks like:
- Technical workstreams are delivered with clear ownership, sound implementation decisions, and predictable communication of risks and dependencies.
- Customer environments meet agreed requirements and are documented for secure, sustainable operations.
- Privileged accounts and systems are onboarded with appropriate access, rotation, and session controls.
- Complex technical issues are resolved efficiently, with appropriate customer and vendor coordination.
- Customer administrators can confidently operate the delivered solution after handoff, and less-experienced consultants benefit from the senior consultant’s technical guidance.
Why AHEAD:
Through our daily work and internal groups like Moving Women AHEAD and RISE AHEAD, we value and benefit from diversity of people, ideas, experience, and everything in between.
We fuel growth by stacking our office with top-notch technologies in a multi-million-dollar lab, by encouraging cross department training and development, sponsoring certifications and credentials for continued learning.
India Employment Benefits include:
Comprehensive health insurance coverage for employees, with options to extend coverage to dependents
Paid time off and company holidays, along with additional leave benefits as per policy
Flexible work arrangements, supporting work-life balance
Learning and development opportunities to support continuous growth and upskilling
Employee wellness initiatives and programs focused on physical and mental well-being
Retirement and statutory benefits in line with India regulations
Inclusive and people-first culture, with a strong focus on collaboration and ownership