Cyber SDC - Privileged Access Management - Senior

Cyber SDC - Privileged Access Management - Senior

Join EY as a Senior Consultant in the Identity and Access Management (IAM) team. The role focuses on designing, engineering, maintaining, and troubleshooting privilege and secret management solutions across the IAM spectrum.

• Support the development of privilege and secret access management controls (Cyber Ark, Beyond Trust, Hashi Corp, Delinea).
• Assist in the design and implementation of privileged access and secret management solutions.
• Participate in requirement gathering and definition of use at the enterprise level.
• Configure and optimize discovery tools for privilege accounts, services, SSH keys, and tasks (Cyber Ark, Hashi Corp, Delinea, Beyond Trust).
• Support onboarding target systems such as Windows, Linux, Unix accounts, databases, and integration of Dev Ops solutions.
• Demonstrate knowledge of modern cloud vaults such as AWS Secret Manager and Azure Key Vault.
• Assist in defining and implementing vaulting, rotation, and heartbeat policies for human and non‑human identities.
• Participate in the self‑service design and implementation of privilege or secrets life cycle management.
• Contribute to the development and establishment of governance processes for non‑human identity management.
• Support the development of policies for endpoint management solutions.

• Proven experience in integrating, deploying, and configuring PAM and Secret Management technologies with a focus on Cyber Ark and familiarity with other IAM solutions.
• In‑depth knowledge of privilege access management frameworks and ability to offer guidance on their integration.
• Practical expertise in developing Cyber Ark technology stack, Hashi Corp Vault, Beyond Trust, and Delinea.
• Proficiency in implementing, managing, and maintaining enterprise‑level privilege access management and secret management tools.
• Solid understanding of enterprise directory services such as Active Directory, Azure AD, and LDAP.
• Strong problem‑solving and analytical skills with the ability to translate business requirements into technical specifications.
• A track record of delivering high‑quality client services and work products within expected time frames.
• Excellent documentation skills, including the creation of procedures, process documentation, and user documentation related to IAM applications.

• A bachelor’s degree in a related field and approximately 4–6 years of related work experience; or a graduate degree and approximately 2–4 years of related work experience.
• Experience with PAM architecture and development within Cyber Ark, Hashi Corp, or other PAM solutions.
• Hands‑on experience with Cyber Ark Conjur and Hashi Corp Vault usage and functionality.
• A valid driver’s license in the US and/or a valid passport; willingness and ability to travel.

• Professional certifications in Identity & Access Management such as CISSP, CISM, or vendor certifications like Cyber Ark CDE, Hashi Vault Certified Implementation Engineer.
• Familiarity with additional IAM technologies and tools (SailPoint, Forge Rock, Ping Identity, RSA, etc.).
• Knowledge of cloud‑based IAM solutions and experience working with cloud platforms (AWS, Azure, Google Cloud).
• Understanding of regulatory compliance frameworks and industry standards related to IAM (GDPR, HIPAA, NIST, ISO 27001).
• Prior experience providing PAM services to clients from various industries.
• Strong interpersonal and communication skills for collaboration with clients and cross‑functional teams.

• Competitive compensation and benefits package with performance‑based rewards and a wide range of paid time off options.
• Hybrid model with flexible in‑person work 40‑60% of the time for external, client‑serving roles.
• Flexible vacation policy and support for personal or family care leaves.

EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records. EY is committed to providing reasonable accommodation to qualified individuals with disabilities.