Senior Consultant Privileged Access Management

Integrity360 • Stockholm, ME

1d

About The Position

We are looking for a Senior Consultant - Privileged Access Management to design, implement, integrate, support and optimise enterprise PAM solutions for clients. This is a hands-on technical consulting role for an experienced practitioner who can take ownership across the delivery lifecycle, solve complex privileged access challenges and work confidently with client and internal technical teams.
The successful candidate will bring approximately 5 years of relevant PAM implementation, engineering, support or technical consulting experience, with strong hands-on expertise in either Idira (previously known as CyberArk) or BeyondTrust. Expertise in both technologies is advantageous but is not required.

Requirements

• Approximately 5 years of relevant professional experience in PAM, enterprise security implementation/support, systems integration or technical consulting.
• Strong hands-on implementation and support experience in at least one of Idira (previously known as CyberArk) or BeyondTrust.
• Practical understanding of PAM principles including least privilege, privileged credential management, password rotation, secure session management, privileged account onboarding, access control and auditing.
• Experience integrating PAM platforms with directories, servers, databases, cloud environments, applications and enterprise security or operations tooling.
• Strong troubleshooting and problem-solving skills across PAM components, integrations, privileged sessions and credential-management processes.
• Experience preparing technical documentation and supporting testing, deployment, operational handover and ongoing platform support.
• Confident client-facing communication skills, including the ability to run technical workshops.
• Ability to work independently, prioritise delivery tasks and contribute effectively across multiple client engagements.
• Idira (previously known as CyberArk): hands-on delivery with Privileged Access Manager Self-Hosted and/or Privilege Cloud, including privileged account management, secure vaulting, session management and credential rotation. Experience with components such as PSM, CPM and PSM for SSH, platform configuration, connectors/plugins and relevant authentication or SIEM integrations is advantageous.
• BeyondTrust: hands-on delivery with one or more relevant BeyondTrust PAM technologies such as Password Safe, Privileged Remote Access, Endpoint Privilege Management, Remote Support or AD Bridge. Experience configuring access policies, secure remote access, credential management, integrations and platform administration is advantageous.
• Candidates must have the existing legal right to work in the country where this position is based. Unfortunately, we are unable to provide visa sponsorship for this role.

Nice To Haves

• Expertise in both Idira and BeyondTrust technologies is advantageous.
• Experience across both Idira and BeyondTrust, or another enterprise PAM platform.
• Experience with Microsoft Azure, AWS or other cloud environments.
• Experience with scripting or development used in PAM integrations, plugins, connectors or automation, such as PowerShell, C#, Java or APIs.
• Experience with SIEM, ITSM and directory integrations such as Active Directory/LDAP.
• Experience with privileged access assessments, platform health checks, upgrades or remediation activities.
• Experience mentoring junior consultants or contributing to reusable technical assets and delivery standards.
• Vendor certifications are advantageous but are not essential.
• Idira (previously known as CyberArk) specialism: CDE-PAM, CDE-CPC
• BeyondTrust specialism: BT Privileged Management for Windows BCIE, BT Privileged Remote Access BCIE, BT Remote Support BCIE, Privileged Management for Unix/Linux Administration Course, AD Bridge Administration Course
• Other relevant PAM, identity security, cloud, infrastructure or cybersecurity certifications are advantageous.
• Equivalent practical experience will be considered alongside formal qualifications and certifications.

Responsibilities

• Lead and contribute to the design, configuration, integration, deployment and ongoing support of enterprise PAM solutions.
• Deliver hands-on implementations using Idira or BeyondTrust, aligned to client requirements and approved technical designs.
• Lead technical discovery sessions and translate security and technical requirements into practical PAM designs, configurations and implementation documentation.
• Implement and support privileged account onboarding, credential management and rotation, password policies, secure privileged sessions, access controls and audit requirements.
• Configure and maintain platform components, policies, safes or managed systems, privileged session controls and access workflows relevant to the chosen technology.
• Build and support integrations with enterprise directories, target systems, cloud platforms, SIEM, ITSM and other security or infrastructure services where required.
• Troubleshoot PAM platform, connector, session, credential-management and integration issues, and support upgrades, maintenance, health checks and optimisation activities.
• Plan and support system, integration and user acceptance testing, including defect investigation and resolution.
• Produce technical documentation including solution designs, configuration documents, runbooks, SOPs and implementation records.
• Communicate technical concepts clearly to client stakeholders, partners and internal teams.
• Contribute to project scoping, estimates, delivery tracking, status reporting and risk or issue management.
• Mentor junior consultants and contribute to technical knowledge sharing and continuous improvement across the PAM practice.

Benefits

• Invest heavily in learning, development and progression

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed