PAM Senior Manager

PowerToFly; Arizona; On-site; USD 163,000 - 322,000; Full time

Job summary

Deloitte's Cyber Identity team seeks an Associate Vice President, Engineering Management to lead PAM strategy, delivery, and governance for large enterprises across cloud, hybrid, and on‑prem environments.

The role requires 12+ years in IT or cybersecurity, hands‑on PAM experience with CyberArk, Delinea, BeyondTrust, and HashiCorp Vault, and strong leadership of cross‑geography delivery teams and executive stakeholders.

Qualifications

• 12+ years in IT or cybersecurity involving design/architecture of information systems
• 10+ years delivering privileged access management across strategy, design, implementation, migration, and operations
• Experience leading enterprise-scale PAM implementations with major platforms
• Ability to own business development, scope, pricing, staffing, budgets, margin, risk, and quality across engagements
• Willingness to travel 40-60% on average (varies by client)

Responsibilities

• Lead the strategy, solutioning, and delivery of PAM engagements across cloud, hybrid, and on‑prem environments
• Advise client leaders on PAM platform strategy, vendor evaluation, control design, and roadmap decisions
• Oversee multiple concurrent engagements including scope, staffing, budgets, margins, and executive reporting
• Direct enterprise-scale PAM implementations including operating model design, build standards, testing, and transition to operations
• Drive practice growth through business development, alliance relationships, and leadership of delivery teams across geographies

Skills

Leadership

Communication

Mentoring

Project management

Time management

Education

Bachelor's degree in Computer Science or related field

Tools

CyberArk

Delinea

BeyondTrust

HashiCorp Vault

Job description

Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.

Recruiting for this role ends on 12/31/2026.

Work you'll do

As an Associate Vice President, Engineering Management on the Cyber Identity team, you will be responsible for...

• Leading the strategy, solutioning, and delivery of privileged access management (PAM) engagements across cloud, hybrid, and on-premises environments.
• Advising client leaders on PAM platform strategy, vendor evaluation, control design, and roadmap decisions across privileged account management, session management, endpoint privilege management, secrets management, and secure remote access.
• Overseeing multiple concurrent engagements, including scope, staffing, budgets, margins, delivery risk, quality, and executive-level status reporting.
• Directing enterprise-scale PAM implementation and application onboarding programs, including operating model design, build standards, testing, cutover planning, runbooks, and transition to operations.
• Driving practice growth through business development, proposal development, alliance relationships, technical mentoring, and leadership of multidisciplinary delivery teams across geographies.

A successful candidate would possess these skills:

• Ability to work independently and collaborate as part of a team
• Effective written and verbal communication skills
• Meticulous attention to detail and quality of work product
• Ability to build and sustain professional relationships
• Ability to lead projects or workstreams
• Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
• Strong interpersonal skills and professional demeanor
• Ability to meet deadlines
• Ability to mentor and provide clear guidance to others

The team

Deloitte's Cyber Identity team helps organizations strengthen security, support transformation, and manage risk through identity-centered solutions across the enterprise. Within that practice, the Privileged Access Management offering focuses on strategy, implementation, modernization, and operations for privileged account controls, secrets management, endpoint privilege management, and secure access capabilities. Teams work across leading platforms and delivery models to help clients improve governance, reduce risk, and scale sustainable PAM programs.

Qualifications

Required:

• Bachelor's degree in Computer Science, Cybersecurity, Information Security, Engineering, Information Technology, Finance, or Business
• 12+ years of experience in information technology or cybersecurity involving the design, implementation, or architecture of information systems or security solutions
• 10+ years of experience delivering privileged access management solutions across strategy, design, implementation, migration, and operations
• Experience leading enterprise-scale privileged access management implementations using one or more platforms such as CyberArk, Delinea, BeyondTrust, HashiCorp Vault, or comparable solutions
• Experience owning business development, scope, pricing, staffing, budgets, margin, risk, and quality across multiple concurrent client engagements
• Ability to travel 40-60%, on average, based on the work you do and the clients and industries/sectors you serve.
• Limited immigration sponsorship may be available.

Preferred:

• Advanced degree in Computer Science, Cybersecurity, Information Security, Engineering, Information Technology, Finance, or Business
• Prior Big 4 or top-tier consulting experience at the Senior Manager level or above
• Certifications in one or more privileged access management platforms such as CyberArk, Delinea, BeyondTrust, or HashiCorp Vault
• CISSP, Certified Information Security Manager (CISM), or equivalent certification
• Experience with cloud-native privileged access or cloud infrastructure entitlement management capabilities, including Amazon Web Services Identity and Access Management (AWS IAM), Microsoft Azure Privileged Identity Management (Azure PIM), or Google Cloud Platform Identity and Access Management (GCP IAM)
• Experience leading distributed delivery teams and engaging C-suite stakeholders on enterprise cyber risk strategy

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $163,400 to $322,100.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.