EY
Cyber SDC - Privileged Access Management - Manager - Location OPEN
EY, Memphis, Tennessee, us, 37544
Cyber SDC - Privileged Access Management – Manager
Location: Anywhere in Country. Join EY, a global leader in consulting, assurance, tax and advisory, to shape your future with confidence.
The opportunity We currently offer an exciting career opportunity for a manager responsible for designing, engineering, maintaining, and troubleshooting privileged and secret management solutions across the IAM spectrum. Collaborating with esteemed cybersecurity professionals, you will learn and apply cutting‑edge tools and techniques to address the most pressing security challenges.
Key Responsibilities
Develop privilege and secret access management controls using CyberArk, BeyondTrust, Hashi, and Delinea solutions.
Oversee the design and implementation of the privileged access and secret management solution.
Assist with requirement gathering and define use cases at the enterprise level.
Configure and optimize discovery tools for privilege accounts, services, SSH keys, and tasks (CyberArk, HashiCorp, Delinea, BeyondTrust), including auto‑detection and auto‑onboarding.
Manage onboarding of target systems such as Windows, Linux, Unix accounts, databases (Oracle, MS SQL, Redis), and integration with DevOps solutions (Ansible, Puppet, Jenkins, Kubernetes, OpenShift, GitHub, GitLab, Docker).
Apply knowledge of modern cloud vaults such as AWS Secret Manager and Azure Key Vault.
Define and implement vaulting, rotation, and heartbeat policies for human and non‑human identities; enable SSH key and password rotation, dual control, and break‑glass procedures.
Participate in the self‑service design and implementation of the privilege or secret lifecycle management using enterprise identity governance solutions.
Develop governance processes for non‑human identity management.
Develop policies for endpoint management solutions including Windows workstations, macOS, Linux, and Unix servers.
Skills and Attributes
Proven experience integrating, deploying, and configuring PAM and secret management technologies, particularly CyberArk, HashiCorp Vault, BeyondTrust, and Delinea, and familiarity with IAM tools such as Saviynt, SailPoint, Entra.
In‑depth knowledge of privilege access management frameworks and ability to guide their integration into existing applications.
Strong problem‑solving and analytical skills with the ability to translate business requirements into technical specifications.
Excellent documentation skills, creating procedures and user guidance for IAM applications.
Qualifications
Bachelor’s degree in a related field and approximately 8 years of related work experience; or a graduate degree and approximately 3 years of related experience.
Experience with PAM architecture and development within CyberArk, HashiCorp, or other PAM solutions.
Hands‑on experience with CyberArk Conjur and HashiCorp Vault.
Valid driver’s license in the US and/or valid passport; willingness and ability to travel.
Preferred Qualifications
Professional certifications in IAM such as CISSP, CISM, or vendor certifications like CyberArk CDE, HashiCorp Vault Certified Implementation Engineer.
Familiarity with additional IAM technologies and tools, including SailPoint, ForgeRock, Ping Identity, RSA.
Experience with cloud platforms AWS, Azure, or Google Cloud and cloud‑based IAM solutions.
Knowledge of regulatory compliance frameworks (GDPR, HIPAA, NIST, ISO 27001).
Prior experience providing PAM services to diverse industries.
Strong interpersonal and communication skills for client and cross‑functional collaboration.
What We Look For We’re interested in intellectually curious people with a genuine passion for cyber security. With your broad exposure across IAM, you will speak up with innovative ideas that make a lasting difference.
What We Offer
Comprehensive compensation and benefits, including competitive salary and performance‑based rewards.
Hybrid work model with 40–60% in‑person collaboration.
Flexible vacation policy and generous paid holidays and leaves.
Ready to shape your future? EY accepts applications for this position on an ongoing basis.
EY focuses on high‑ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities.
EY is committed to providing reasonable accommodation to qualified individuals with disabilities. If you need assistance, please contact EY Talent Shared Services at ssc.customersupport@ey.com.
#J-18808-Ljbffr
The opportunity We currently offer an exciting career opportunity for a manager responsible for designing, engineering, maintaining, and troubleshooting privileged and secret management solutions across the IAM spectrum. Collaborating with esteemed cybersecurity professionals, you will learn and apply cutting‑edge tools and techniques to address the most pressing security challenges.
Key Responsibilities
Develop privilege and secret access management controls using CyberArk, BeyondTrust, Hashi, and Delinea solutions.
Oversee the design and implementation of the privileged access and secret management solution.
Assist with requirement gathering and define use cases at the enterprise level.
Configure and optimize discovery tools for privilege accounts, services, SSH keys, and tasks (CyberArk, HashiCorp, Delinea, BeyondTrust), including auto‑detection and auto‑onboarding.
Manage onboarding of target systems such as Windows, Linux, Unix accounts, databases (Oracle, MS SQL, Redis), and integration with DevOps solutions (Ansible, Puppet, Jenkins, Kubernetes, OpenShift, GitHub, GitLab, Docker).
Apply knowledge of modern cloud vaults such as AWS Secret Manager and Azure Key Vault.
Define and implement vaulting, rotation, and heartbeat policies for human and non‑human identities; enable SSH key and password rotation, dual control, and break‑glass procedures.
Participate in the self‑service design and implementation of the privilege or secret lifecycle management using enterprise identity governance solutions.
Develop governance processes for non‑human identity management.
Develop policies for endpoint management solutions including Windows workstations, macOS, Linux, and Unix servers.
Skills and Attributes
Proven experience integrating, deploying, and configuring PAM and secret management technologies, particularly CyberArk, HashiCorp Vault, BeyondTrust, and Delinea, and familiarity with IAM tools such as Saviynt, SailPoint, Entra.
In‑depth knowledge of privilege access management frameworks and ability to guide their integration into existing applications.
Strong problem‑solving and analytical skills with the ability to translate business requirements into technical specifications.
Excellent documentation skills, creating procedures and user guidance for IAM applications.
Qualifications
Bachelor’s degree in a related field and approximately 8 years of related work experience; or a graduate degree and approximately 3 years of related experience.
Experience with PAM architecture and development within CyberArk, HashiCorp, or other PAM solutions.
Hands‑on experience with CyberArk Conjur and HashiCorp Vault.
Valid driver’s license in the US and/or valid passport; willingness and ability to travel.
Preferred Qualifications
Professional certifications in IAM such as CISSP, CISM, or vendor certifications like CyberArk CDE, HashiCorp Vault Certified Implementation Engineer.
Familiarity with additional IAM technologies and tools, including SailPoint, ForgeRock, Ping Identity, RSA.
Experience with cloud platforms AWS, Azure, or Google Cloud and cloud‑based IAM solutions.
Knowledge of regulatory compliance frameworks (GDPR, HIPAA, NIST, ISO 27001).
Prior experience providing PAM services to diverse industries.
Strong interpersonal and communication skills for client and cross‑functional collaboration.
What We Look For We’re interested in intellectually curious people with a genuine passion for cyber security. With your broad exposure across IAM, you will speak up with innovative ideas that make a lasting difference.
What We Offer
Comprehensive compensation and benefits, including competitive salary and performance‑based rewards.
Hybrid work model with 40–60% in‑person collaboration.
Flexible vacation policy and generous paid holidays and leaves.
Ready to shape your future? EY accepts applications for this position on an ongoing basis.
EY focuses on high‑ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities.
EY is committed to providing reasonable accommodation to qualified individuals with disabilities. If you need assistance, please contact EY Talent Shared Services at ssc.customersupport@ey.com.
#J-18808-Ljbffr