Cyber SDC - Privileged Access Management - Senior

Cyber SDC - Privileged Access Management - Senior

Location:

Anywhere in Country

We’re all in to shape your future with confidence. Join EY and help build a better working world.

In an ever‑evolving IT landscape, EY is a trusted partner for clients across diverse industries. As a member of our Identity and Access Management team, you will empower clients to navigate complex enterprise identity environments.

Senior Consultant responsible for supporting the design, engineering, maintenance, and troubleshooting of privilege and secret management solutions across the IAM spectrum.

• Support the development of privilege and secret access management controls (Cyber Ark, Beyond Trust, Hashi Corp, and Delinea).
• Assist in design and implementation of privileged access and secret management solutions.
• Participate in requirement gathering and definition of use cases at the enterprise level.
• Configure and optimize discovery tools for privilege accounts, services, SSH keys, and tasks.
• Support onboarding of target systems:
  Windows, Linux, Unix, databases (Oracle, MS SQL, Redis), and Dev Ops solutions.
• Demonstrate knowledge of modern cloud vaults (AWS Secret Manager, Azure Key Vault).
• Assist in defining vaulting, rotation, and heartbeat policies; enable key and password rotation, dual control, break‑glass.
• Participate in self‑service design of privilege or secrets lifecycle management.
• Contribute to governance processes for non‑human identity management.
• Support policy development for endpoint management solutions.

• Proven experience in PAM and secret management with a focus on Cyber Ark and other IAM solutions.
• In‑depth knowledge of privilege access management frameworks.
• Practical expertise with Cyber Ark, Hashi Corp Vault, Beyond Trust, and Delinea.
• Proficiency in enterprise‑level privilege and secret management tools.
• Solid understanding of directory services (Active Directory, Azure AD, LDAP).
• Strong problem‑solving and analytical skills.
• Track record of delivering high‑quality client services on time.
• Excellent documentation skills.

• Bachelor’s degree in a related field with 4–6 years of experience; or a graduate degree with 2–4 years.
• Experience with PAM architecture and development (Cyber Ark, Hashi Corp).
• Hands‑on experience with Cyber Ark Conjur and Hashi Corp Vault.
• Valid driver’s license or passport; willingness to travel.

• Certifications in Identity & Access Management (CISSP, CISM, vendor certifications).
• Familiarity with SailPoint, Forge Rock, Ping Identity, RSA, and similar tools.
• Knowledge of cloud IAM and experience with AWS, Azure, or Google Cloud.
• Understanding of regulatory compliance frameworks (GDPR, HIPAA, NIST, ISO 27001).
• Experience providing PAM services across diverse industries.
• Strong interpersonal and communication skills.

We seek intellectually curious people with a passion for cybersecurity and the ability to present innovative ideas.

• Competitive compensation ($106,800–$194,800 base in the US).
• Comprehensive benefits: medical, dental, pension, 401(k), paid time off.
• Hybrid work model: 40‑60% onsite.
• Flexible vacation policy and paid holidays.

EY accepts applications on an ongoing basis.

EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis. EY is committed to providing reasonable accommodation to qualified individuals with disabilities. For more information or assistance, please contact EY talent services at  or 1‑800‑EY‑HELP
3.