Senior Consultant (Privileged Access Management)

Integrity360; Paris; Hybrid; EUR 70,000 - 120,000; Full time

Benefits offered by this job

Flexible Working Arrangements

Health Insurance

Training & Upskilling Budget

Career Development Opportunities

Job summary

Integrity360 is seeking a Senior Consultant for Privileged Access Management to design, implement, and optimise enterprise PAM solutions for clients. This hands-on role demands taking ownership across delivery lifecycles, solving complex privileged access challenges and collaborating with client and internal technical teams.

You will lead technical discovery, craft PAM designs, configure and deploy Idira (CyberArk) or BeyondTrust, and produce runbooks and implementation records.

Qualifications

• Approximately 5 years of PAM implementation/engineering experience.
• Hands-on expertise with Idira/CyberArk or BeyondTrust.
• Experience in documentation and testing deployment handover.

Responsibilities

• Design, configure, integrate, deploy and optimise PAM solutions.
• Lead discovery sessions and translate requirements into PAM designs.
• Onboard privileged accounts, rotate credentials, enforce policies.
• Integrate PAM with directories, cloud, SIEM, ITSM.
• Mentor junior consultants and contribute to knowledge sharing.

Skills

PAM implementation

CyberArk Idira

BeyondTrust

Client facing

Documentation

Tools

Idira

CyberArk

BeyondTrust

PowerShell

C#

Java

APIs

Job description

• We are looking for a Senior Consultant - Privileged Access Management to design, implement, integrate, support and optimise enterprise PAM solutions for clients
• This is a hands-on technical consulting role for an experienced practitioner who can take ownership across the delivery lifecycle, solve complex privileged access challenges and work confidently with client and internal technical teams
• Lead and contribute to the design, configuration, integration, deployment and ongoing support of enterprise PAM solutions
• Deliver hands-on implementations using Idira or BeyondTrust, aligned to client requirements and approved technical designs
• Lead technical discovery sessions and translate security and technical requirements into practical PAM designs, configurations and implementation documentation
• Implement and support privileged account onboarding, credential management and rotation, password policies, secure privileged sessions, access controls and audit requirements
• Configure and maintain platform components, policies, safes or managed systems, privileged session controls and access workflows relevant to the chosen technology
• Build and support integrations with enterprise directories, target systems, cloud platforms, SIEM, ITSM and other security or infrastructure services where required
• Troubleshoot PAM platform, connector, session, credential-management and integration issues, and support upgrades, maintenance, health checks and optimisation activities
• Plan and support system, integration and user acceptance testing, including defect investigation and resolution
• Produce technical documentation including solution designs, configuration documents, runbooks, SOPs and implementation records
• Communicate technical concepts clearly to client stakeholders, partners and internal teams
• Contribute to project scoping, estimates, delivery tracking, status reporting and risk or issue management
• Mentor junior consultants and contribute to technical knowledge sharing and continuous improvement across the PAM practice

Benefits

• Flexible Working Arrangements
• Career Development Opportunties
• Health Insurance
• Pension
• Large Training & Upskilling Budget

Other relevant PAM, identity security, cloud, infrastructure or cybersecurity certifications are advantageousEquivalent practical experience will be considered alongside formal qualifications and certificationsThe successful candidate will bring approximately 5 years of relevant PAM implementation, engineering, support or technical consulting experience, with strong hands‑on expertise in either Idira (previously known as CyberArk) or BeyondTrust. Expertise in both technologies is advantageous but is not requiredExperience preparing technical documentation and supporting testing, deployment, operational handover and ongoing platform supportExperience integrating PAM platforms with directories, servers, databases, cloud environments, applications and enterprise security or operations toolingApproximately 5 years of relevant professional experience in PAM, enterprise security implementation/support, systems integration or technical consultingStrong hands‑on implementation and support experience in at least one of Idira (previously known as CyberArk) or BeyondTrustStrong troubleshooting and problem‑solving skills across PAM components, integrations, privileged sessions and credential‑management processesBeyondTrust: hands‑on delivery with one or more relevant BeyondTrust PAM technologies such as Password Safe, Privileged Remote Access, Endpoint Privilege Management, Remote Support or AD Bridge. Experience configuring access policies, secure remote access, credential management, integrations and platform administration is advantageousConfident client‑facing communication skills, including the ability to run technical workshopsPractical understanding of PAM principles including least privilege, privileged credential management, password rotation, secure session management, privileged account onboarding, access control and auditingIdira (previously known as CyberArk): hands‑on delivery with Privileged Access Manager Self‑Hosted and/or Privilege Cloud, including privileged account management, secure vaulting, session management and credential rotation. Experience with components such as PSM, CPM and PSM for SSH, platform configuration, connectors/plugins and relevant authentication or SIEM integrations is advantageousAbility to work independently, prioritise delivery tasks and contribute effectively across multiple client engagementsIdira (previously known as CyberArk) specialismCDE-PAMBeyondTrust specialismCDE-CPCBT Privileged Remote Access BCIEBT Privileged Management for Windows BCIEBT Remote Support BCIEAD Bridge Administration CoursePrivileged Management for Unix/Linux Administration CourseVendor certifications are advantageous but are not essential. Strong hands‑on PAM delivery experience remains the primary requirementExperience with SIEM, ITSM and directory integrations such as Active Directory/LDAPExperience across both Idira and BeyondTrust, or another enterprise PAM platformExperience with privileged access assessments, platform health checks, upgrades or remediation activitiesExperience with scripting or development used in PAM integrations, plugins, connectors or automation, such as PowerShell, C#, Java or APIsExperience with Microsoft Azure, AWS or other cloud environmentsExperience mentoring junior consultants or contributing to reusable technical assets and delivery standards