Cyber Operate Senior Consultant - CyberArk

Position Summary

Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.

Work you'll do

As a Managed Services Engineer III on the Deloitte Cyber team, you will be responsible for...

• Evaluate business and technology risks, assess internal controls, and identify opportunities to strengthen control environments.
• Install, integrate, deploy, configure, and administer CyberArk privileged access management capabilities across cloud and hybrid environments, including Privilege Cloud, Endpoint Privilege Manager, Secure Infrastructure Access, and Secure Cloud Access.
• Configure privileged-access controls for endpoint least privilege, application control, credential management, session brokering and auditing, just-in-time access, monitoring, and risk reduction.
• Lead application onboarding and identity lifecycle integrations using CyberArk Credential Provider, Central Credential Provider, and System for Cross-domain Identity Management (SCIM); support integrations with directory services, servers, databases, and network and security devices.
• Lead delivery workstreams; develop technical designs, implementation runbooks, and operational procedures; resolve delivery issues; train team members; and support certificate renewals, HTML5 Gateway, Privileged Session Manager, patches, upgrades, and vulnerability remediation.
• Partner with clients and stakeholders on technical and functional requirements, solution design, and post-sales documentation; contribute to proposals, requests for proposal, pricing strategies, engagement letters, and statements of work.

• Ability to work independently and collaborate as part of a team
• Effective written and verbal communication skills
• Meticulous attention to detail and quality of work product
• Ability to build and sustain professional relationships
• Ability to lead projects or workstreams
• Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
• Strong interpersonal skills and professional demeanor
• Ability to meet deadlines
• Ability to provide clear guidance to others

• BA/BS Degree in Computer Science, Cyber Security, Information Security, Engineering, Information Technology, Finance, Business, or relevant fields.
• 3-5+ years of experience developing, implementing, or architecting information systems, including 2+ years of experience installing, integrating, deploying, administering, configuring, troubleshooting, and supporting CyberArk privileged access management solutions across cloud, hybrid, and on-premises environments.
• Experience designing and documenting CyberArk privileged access management architectures, use cases, technical flows, standard operating procedures, configurations, and implementation reports; integrating CyberArk with directory services, Windows and UNIX/Linux servers, databases, network and security devices, and identity governance and administration solutions; developing PowerShell and REST API automation; and supporting testing, patches, upgrades, version updates, certificate renewals, and security-vulnerability remediation.
• You must reside within a commutable distance of your assigned office with the ability to commute daily, if required, without the need for overnight accommodations.
• You can expect to co-locate at minimum of 2 times a week with variations based on types of work/projects and client locations.
• Ability to travel 25-50%, on average, based on the work you do and the clients and industries/sectors you serve.
• Limited immigration sponsorship may be available.

• Experience in a consulting or Big Four professional services environment.
• CyberArk Certified Delivery Engineer (CDE) certification or a current CyberArk certification aligned with Privilege Cloud or Endpoint Privilege Manager.
• Certified Information Systems Security Professional (CISSP) certification.
• Experience with AutoIT and PACLI automation tools.