Senior Technical Consultant, Security

Ahead; Gurugram District; On-site; INR 4,500,000 - 6,000,000; Full time

Benefits offered by this job

Health insurance

Paid time off

Learning and development

Flexible work arrangements

Job summary

AHEAD is seeking a senior, customer-facing Technical Consultant to lead Idira Privilege Cloud (CyberArk Privilege Cloud) implementations. You will own technical workstreams from discovery through handoff, advise customer security and infrastructure teams, and drive high-quality delivery across Windows, Linux, and cloud environments.

You will mentor peers, contribute to scoping and project plans, and travel as needed to support delivery across regions.

Qualifications

• 5+ years in technical consulting with customer delivery.
• Hands-on implementation/admin of Idira/CyberArk Privilege Cloud.
• Own PAM implementation workstreams end-to-end.
• Ability to lead discovery and design with limited oversight.
• Strong Windows and Linux admin knowledge.
• Clear communication with technical and non-technical audiences.
• Mentor peers and collaborate with distributed teams.

Responsibilities

• Lead technical discovery and translate requirements into Privilege Cloud designs.
• Own one or more workstreams through implementation and handoff.
• Design and configure core PAM capabilities including rotation.
• Lead deployment of connectors and related components with customer teams.
• Plan onboarding of privileged accounts across Windows and Linux.
• Lead integrations with identity providers and directory services.
• Diagnose complex issues, coordinate with vendor or customer teams.
• Review decisions for security and operability.
• Serve as trusted technical contact for stakeholders.
• Coach teammates through reviews and knowledge sharing.
• Contribute input to scoping and proposals with architects.
• Support travel and time-zone overlap when required.

Skills

Customer facing

Technical leadership

PAM experience

Windows/Linux admin

Education

CyberArk Privilege Cloud certification

CDE-CPC

CPC-SEN

CPC or CDE credential

Tools

Idira/CyberArk Privilege Cloud

Job description

At AHEAD, we prioritize creating a culture of belonging, where all perspectives and voices are represented, valued, respected, and heard. We create spaces to empower everyone to speak up, make change, and drive the culture at AHEAD.

We are an equal opportunity employer, and do not discriminate based on an individual's race, national origin, color, gender, gender identity, gender expression, sexual orientation, religion, age, disability, marital status, or any other protected characteristic under applicable law, whether actual or perceived.

We embrace all candidates that will contribute to the diversification and enrichment of ideas and perspectives at AHEAD.

AHEAD is seeking a senior, customer-facing Technical Consultant to lead delivery of Idira Privilege Cloud (formerly CyberArk Privilege Cloud) implementations. You will own technical workstreams from discovery and design through configuration, integration, testing, and handoff. You will advise customer security, identity, and infrastructure teams, resolve complex implementation issues, and help raise the technical quality of the broader delivery team.

Idira Privilege Cloud is a SaaS privileged-access solution for safeguarding credentials, automating password rotation, and monitoring privileged sessions.

Responsibilities

• Lead technical discovery and translate customer requirements into implementable Privilege Cloud designs, deployment plans, and delivery estimates.
• Own one or more technical workstreams through implementation, integration, testing, issue resolution, documentation, and operational handoff.
• Design and configure core PAM capabilities, including safes, accounts, platforms, access controls, password rotation and reconciliation policies, and privileged-session workflows.
• Lead deployment and troubleshooting of Privilege Cloud connectors and related components, including CPM, PSM, and SSH-based access, in coordination with customer infrastructure teams.
• Plan and oversee onboarding of privileged accounts across Windows, Linux/Unix, directory services, databases, network devices, and business applications.
• Lead integrations with customer identity providers and directory services, including authentication, user and group mapping, and access-model troubleshooting.
• Diagnose complex issues spanning the Idira platform and customer infrastructure; coordinate with vendor or customer teams, communicate impact and options, and drive issues to resolution.
• Review implementation decisions and deliverables for security, operability, and alignment with customer requirements and established practices.
• Serve as a trusted technical contact for customer stakeholders; communicate risks, assumptions, dependencies, and recommendations clearly.
• Coach and support other consultants through design reviews, troubleshooting, knowledge sharing, and practical delivery guidance.
• Contribute technical input to scoping, solution proposals, project plans, and knowledge assets; collaborate with AHEAD architects, project managers, and delivery colleagues across regions.
• Support project travel and reasonable time-zone overlap when required for customer delivery.

Required Qualifications

• 5+ years of experience in technical consulting, systems engineering, cybersecurity, identity, or privileged access management, including substantial customer-facing delivery.
• 3+ years of hands-on implementation or administration experience with Idira/CyberArk Privilege Cloud or CyberArk PAM.
• Demonstrated ownership of PAM implementation workstreams, including privileged account onboarding, access policies, credential rotation and reconciliation, and/or session management.
• Ability to lead technical discovery, make and explain implementation decisions, and manage delivery dependencies with limited day-to-day oversight.
• Strong working knowledge of Windows Server and Linux/Unix administration, networking fundamentals, DNS, firewalls, certificates, and secure connectivity.
• Experience diagnosing complex integrations across enterprise infrastructure and producing clear technical designs, runbooks, test plans, and handoff documentation.
• Strong customer communication, facilitation, and stakeholder-management skills; able to explain technical tradeoffs to both engineering and non-technical audiences.
• Demonstrated ability to mentor peers, lead technical reviews, and collaborate effectively with distributed delivery teams.

Certification

Applicants must hold at least one current, relevant Idira/CyberArk Privilege Cloud credential or delivery certification. Preferred credentials include:

• CDE-CPC - CyberArk Certified Delivery Engineer, Privilege Cloud.
• CPC-SEN - Sentry - Privilege Cloud.
• Another current, vendor-recognized CPC or CDE credential relevant to Privilege Cloud/PAM may be considered.

Candidates with a related CyberArk PAM CDE credential and demonstrable senior-level Privilege Cloud delivery experience may also be considered. Certification names and availability can change; validate the credential title against the current Idira/CyberArk University certification catalog before publishing the posting.

Nice to Have Skills

• Active Directory: domains, users and groups, service accounts, Group Policy, and domain-joined systems.
• LDAP concepts and directory integrations.
• Advanced Windows Server and Linux/Unix troubleshooting, scripting, and service management.
• Database fundamentals, including accounts, permissions, connectivity, and credential rotation for common relational databases.
• Scripting or automation with PowerShell, Python, Bash, or REST APIs.
• Experience with SIEM integration, audit requirements, secrets management, or enterprise security controls.
• Familiarity with cloud and hybrid environments, virtualization, and network/security appliances.
• Experience contributing to solution scoping, effort estimates, architecture diagrams, and customer-facing proposals.

What success looks like

• Technical workstreams are delivered with clear ownership, sound implementation decisions, and predictable communication of risks and dependencies.
• Customer environments meet agreed requirements and are documented for secure, sustainable operations.
• Privileged accounts and systems are onboarded with appropriate access, rotation, and session controls.
• Complex technical issues are resolved efficiently, with appropriate customer and vendor coordination.
• Customer administrators can confidently operate the delivered solution after handoff, and less-experienced consultants benefit from the senior consultant's technical guidance.

Why AHEAD

Through our daily work and internal groups like Moving Women AHEAD and RISE AHEAD, we value and benefit from diversity of people, ideas, experience, and everything in between.

We fuel growth by stacking our office with top-notch technologies in a multi-million-dollar lab, by encouraging cross department training and development, sponsoring certifications and credentials for continued learning.

India Employment Benefits include

• Comprehensive health insurance coverage for employees, with options to extend coverage to dependents
• Paid time off and company holidays, along with additional leave benefits as per policy
• Flexible work arrangements, supporting work-life balance
• Learning and development opportunities to support continuous growth and upskilling
• Employee wellness initiatives and programs focused on physical and mental well-being
• Retirement and statutory benefits in line with India regulations
• Inclusive and people-first culture, with a strong focus on collaboration and ownership

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.