Idira (formerly CyberArk) PAM Consultant (Sentry Certified)

IdentityLogic Consulting LLC; United States; Remote; USD 120,000 - 190,000; Full time

Benefits offered by this job

Conference sponsorship

Certifications paid

Job summary

IdentityLogic Consulting LLC is seeking a seasoned PAM consultant to design and deploy Idira PAM architectures, onboard privileged accounts, and build PSM integration components.

You will configure PTA policies, run health checks, and author runbooks for ongoing operations, with a focus on robust security and scalable deployments.

Qualifications

• 4+ years Idira PAM hands-on implementation experience.
• Active CyberArk Sentry certification (Defender accepted with strong delivery).
• Experience with Vault HA, disaster recovery, and distributed architectures.
• Scripting in PowerShell, Python, or Bash for automation and integrations.
• Working knowledge of Active Directory / Entra ID and core authentication protocols.
• US-based with unrestricted work authorization.

Responsibilities

• Design and deploy Idira PAM architectures including Vault, CPM, PVWA, and PSM components.
• Onboard privileged accounts across Windows, Unix / Linux, databases, cloud platforms, and network devices.
• Build and customize PSM connection components for target systems including web consoles and SaaS apps.
• Configure CPM plugins for automatic password rotation and reconciliation.
• Deploy and tune Privileged Threat Analytics (PTA) policies and incident response workflows.
• Run health checks and architecture reviews for existing Idira deployments.
• Author runbooks, operational procedures, and knowledge transfer documentation.

Skills

CyberArk PAM

PowerShell

Python

Automation scripting

AD / Entra ID

UNIX / Linux

Tools

CyberArk Vault

PSM

PTA

Job description

Deliver CyberArk Privileged Access Manager implementations and health checks across commercial enterprise clients. You'll stand up vaults, onboard privileged accounts, build PSM connection components, and operationalize session recording and threat analytics.

Responsibilities

• Design and deploy Idira PAM architectures including Vault, CPM, PVWA, and PSM components
• Onboard privileged accounts across Windows, Unix / Linux, databases, cloud platforms, and network devices
• Build and customize PSM connection components for target systems including web consoles and SaaS apps
• Configure CPM plugins for automatic password rotation and reconciliation
• Deploy and tune Privileged Threat Analytics (PTA) policies and incident response workflows
• Run health checks and architecture reviews for existing Idira deployments
• Author runbooks, operational procedures, and knowledge transfer documentation

Requirements

• 4+ years Idira PAM hands-on implementation experience
• Active CyberArk Sentry certification (Defender level accepted if strong delivery track record)
• Experience with Vault HA, disaster recovery, and distributed architectures
• PowerShell, Python, or Bash scripting for automation and custom integrations
• Working knowledge of Active Directory, Microsoft Entra ID, and core authentication protocols
• US-based with unrestricted work authorization

Nice to have

• CyberArk Guardian certification
• Experience with CyberArk Identity (formerly Idaptive) or CyberArk Conjur
• CyberArk EPM deployment experience
• Familiarity with competing PAM platforms (BeyondTrust, Delinea) for migration projects

Compensation and benefits

Competitive base plus utilization and performance bonuses. Paid certifications and annual conference sponsorship.