Identity Security Solutions Architect (CyberArk/PIM/PAM)

AHEAD; United States; On-site; USD 270,000 - 300,000; Full time

Benefits offered by this job

Medical, Dental, and Vision Insurance

401(k)

Paid company holidays

Paid time off

Paid parental and caregiver leave

Benefits overview at ahead.com

Job summary

AHEAD is seeking a senior Identity Security Specialist Solutions Engineer to act as a national resource across regions, shaping CyberArk-centered privileged-access architectures and driving identity-security initiatives for multiple platforms including on-premises and cloud environments.

The role requires 7+ years in cybersecurity with at least 4 years in identity security, plus hands-on delivery of pre-sales artifacts, proposals, and architecture workshop leadership.

Qualifications

• 7+ years of experience in cybersecurity, identity, cloud, technology consulting, or solutions engineering, including at least 4 years focused on identity security.
• Prior customer-facing pre-sales, solutions engineering, consulting, or security-architecture experience.
• Demonstrated CyberArk experience in at least one enterprise program spanning two or more lifecycle stages (assessment, design, migration, implementation, integration, or operationalization).
• Experience creating customer-facing proposals, solution designs, SOWs, services proposals, or equivalent pre-sales artifacts.
• Ability to design and present identity-security architectures to technical practitioners and executive stakeholders.

Responsibilities

• Serve as a national identity-security resource supporting qualified opportunities across AHEAD regions.
• Lead advisory discovery, technical sales calls, identity-security assessments, architecture workshops, demonstrations, POVs/POCs, and executive briefings.
• Design and present CyberArk-centered privileged-access architectures for workforce, administrator, vendor, service, machine, and non-human identities.
• Advise customers on privileged-account discovery, vaulting, credential rotation, onboarding, session management, monitoring, just-in-time access, least privilege, break-glass access, and shared-account reduction.
• Partner with delivery leadership to ensure proposed solutions are implementable and aligned with AHEAD's professional and managed services capabilities.
• Create solution designs, configurations, sizing inputs, services proposals, statements of work, presentations, technical justifications, and customer roadmaps.
• Provide pricing and effort inputs for account and delivery teams; final commercial approval remains with the appropriate AHEAD leaders.
• Qualify opportunities based on technical requirements, business outcomes, decision process, funding, and customer readiness.
• Define CyberArk and adjacent identity-security strategies across on-premises, AWS, Azure, GCP, SaaS, and hybrid environments.
• Connect PIM/PAM strategy to IAM, IGA, MFA, SSO, ITDR, secrets management, cloud IAM, SIEM/SOAR, ITSM, and Zero Trust programs.
• Work with OEM field teams on technical alignment, enablement, certifications, and active customer campaigns.
• Contribute reusable architectures, discovery guides, workshop content, competitive insights, and enablement materials.

Skills

CyberArk

PIM/PAM

Identity security

Solutions engineering

Pre-sales

Customer-facing

Cloud platforms

Education

CyberArk certification (preferred)

CISSP / CCSP / GIAC (preferred)

Tools

CyberArk Privilege Cloud

PAM Self-Hosted

Endpoint Privilege Manager

Secrets Manager

Job description

AHEAD is seeking a senior Identity Security Specialist Solutions Engineer to act as a national resource across regions, shaping CyberArk-centered privileged-access architectures and driving identity-security initiatives for multiple platforms including on-premises and cloud environments.

The role requires 7+ years in cybersecurity with at least 4 years in identity security, plus hands-on delivery of pre-sales artifacts, proposals, and architecture workshop leadership.