Non-Human Identity Security Consultant — PAM & Automation

Deloitte France; Richmond (VA); On-site; USD 105,000 - 208,000; Full time

Job summary

Deloitte's Cyber team is seeking a Non-Human Identity Senior Consultant to help clients secure machine, service, and application identities across cloud and hybrid environments.

You will assess risks, design and deploy governance and secrets management, and lead workstreams to deliver runbooks and proposals. This role requires 4+ years in IAM/security and willingness to travel 25-50%.

Join a growing practice and contribute to market-facing content while advancing cloud identity capabilities.

Qualifications

• Bachelor's degree in a relevant field.
• 4+ years of experience developing, implementing, or architecting information systems.
• 4+ years implementing Privileged Access Management or secrets management in cloud environments, hybrid environments, or both.
• 4+ years of experience with at least 1 enterprise Privileged Access Management platform or secrets management platform, such as CyberArk, BeyondTrust, Delinea, HashiCorp Vault, AWS Secrets Manager, or Azure Key Vault.
• 4+ years of experience in at least 3 of the following: automated credential rotation, application credential vaulting, service account governance, service account provisioning and deprovisioning, entitlement reviews, least-privilege access design, integration with LDAP/AD, Kubernetes, Terraform, Jenkins, or GitHub Actions, scripting in PowerShell, Python, or Bash, or REST APIs.
• Ability to travel 25-50%, on average, based on the work you do and the clients and industries you serve.
• Limited immigration sponsorship may be available.

Responsibilities

• Assess client environments to identify Non-Human Identity risks, including secrets sprawl, over-permissioned service accounts, orphaned credentials, and lifecycle governance gaps.
• Design governance, privileged access, and secrets management capabilities for non-human identities across cloud, hybrid, and containerized platforms.
• Implement controls such as credential vaulting, automated rotation, just-in-time access, workload identity federation, and application credential integrations, and emerging agentic AI identity patterns (SPIFFE/SVID, agent-to-agent authentication).
• Advising clients on Non-Human Identity architecture, operating procedures, and implementation plans, including high-level design, low-level design, and runbooks.
• Leading project workstreams, supporting proposals and statements of work, and contributing to practice development through reusable assets and market-facing content.

Skills

Privileged Access Management

Secrets management

Cloud security

Governance

Identity and access governance

Automation / scripting

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Security, Engineering, Information Technology, Finance, Business, or a similar field

Tools

CyberArk

BeyondTrust

Delinea

HashiCorp Vault

AWS Secrets Manager

Azure Key Vault

Job description

Deloitte's Cyber team is seeking a Non-Human Identity Senior Consultant to help clients secure machine, service, and application identities across cloud and hybrid environments.

You will assess risks, design and deploy governance and secrets management, and lead workstreams to deliver runbooks and proposals. This role requires 4+ years in IAM/security and willingness to travel 25-50%.

Join a growing practice and contribute to market-facing content while advancing cloud identity capabilities.