Join Deloitte's cybersecurity team, dedicated to protecting organizations from cyberattacks and safeguarding valuable assets. We champion a secure, vigilant, and resilient approach, focusing not just on attack prevention and response, but on managing cyber risk to unlock new opportunities. Integrate cyber risk management from the outset of strategy development for enhanced information and technology risk control.

Learn more about our Cybersecurity services.

As an Assistant Manager in our Cyber Identity Team, you will cultivate strong client and team relationships to consistently exceed expectations. This role involves leading technical discovery sessions to define Privileged Access Management (PAM) use cases, architecture, and conventions.

You will manage end-to-end implementations, including greenfield installations and upgrades of CyberArk PAS in complex environments. Strategic onboarding of critical infrastructure like Domain Controllers and high-value applications is a key duty. You will also design custom plugins and connectors for unique application needs.

Furthermore, you'll integrate DevSecOps practices, securing secrets in CI/CD pipelines and automating credential fetching for RPA. Providing expert recommendations to CISOs and IT Directors on PAM strategy, risk mitigation, and compliance (SOX, PCI-DSS, HIPAA) will be central to this position.

A minimum of 4 years of experience in the PAM domain, with expertise in CyberArk, BeyondTrust, or Delinea, is required. A B.E. or B.Tech. degree in Computer Science, Information Technology, or a related field from a Tier 1 or Tier 2 institution is essential.

Proficiency in the CyberArk stack, including EPV, PVWA, CPM, PSM, and PTA, is crucial. Advanced skills in PowerShell and CyberArk REST APIs for automation are necessary. A strong understanding of Active Directory, Linux/Unix security, and experience with deploying CyberArk on AWS or Azure, along with knowledge of infrastructure as code tools like Terraform, is expected.

Candidates should possess a deep understanding of networking concepts, including TCP/IP, load balancing (F5/Citrix), and certificate management (SSL/TLS). Hands-on experience with Distributed Vaults or Cluster Vault Manager (CVM) is considered a significant advantage.