01
TRPD-26-04118
Consultant – Cyber Identity (PAM/CyberArk)
Consultant role in a Cyber Identity/PAM team focused on designing and implementing CyberArk Privileged Access Security in complex enterprise environments. The role covers discovery and architecture (Safes, naming conventions), greenfield installs and upgrades (Vault/CPM/PSM/PVWA) across multi-forest AD, onboarding critical infrastructure and high-value apps, building custom CPM plugins and PSM connectors, and integrating AAM with CI/CD and RPA. Requires strong PowerShell and CyberArk REST API automation, solid AD and Linux/Unix security fundamentals, plus exposure to AWS/Azure deployments via IaC and strong networking/certificates knowledge.
Position summary
- Location
- India
- Workplace
- On-site
- Employment
- Full Time
- Experience
- Minimum 2 years and Maximum 5 years
Role overview
Why This Role Matters.
Consultant role in a Cyber Identity/PAM team focused on designing and implementing CyberArk Privileged Access Security in complex enterprise environments. The role covers discovery and architecture (Safes, naming conventions), greenfield installs and upgrades (Vault/CPM/PSM/PVWA) across multi-forest AD, onboarding critical infrastructure and high-value apps, building custom CPM plugins and PSM connectors, and integrating AAM with CI/CD and RPA. Requires strong PowerShell and CyberArk REST API automation, solid AD and Linux/Unix security fundamentals, plus exposure to AWS/Azure deployments via IaC and strong networking/certificates knowledge.
Your Impact
Deliver Enterprise Value
Help organisations solve complex business problems through modern technology, consulting expertise and measurable outcomes.
Collaboration
Work Across Teams
Collaborate with consultants, architects, engineers and client stakeholders throughout the project lifecycle.
Growth
Learn Continuously
Gain exposure to enterprise technologies, certifications, mentoring and real-world project experience.
Career Path
Grow With Ubique
Build a long-term consulting career with opportunities to take on greater responsibility and leadership over time.
Responsibilities
What You'll Be Doing.
Every role at Ubique contributes directly to solving meaningful business challenges for our clients.
02
Design & Discovery: Lead technical discovery sessions to define PAM use cases, Safes architecture, and naming conventions.
03
End-to-End Implementation: Perform greenfield installations and upgrades of CyberArk PAS (Vault, CPM, PSM, PVWA) in complex multi-forest environments.
04
Strategic Onboarding: Architect and execute the onboarding of critical infrastructure, including Domain Controllers, Root accounts, and high-value Business Applications.
05
Custom Development: Design and build custom CPM plugins and PSM connectors for proprietary or legacy applications where out-of-the-box solutions do not exist.
06
DevSecOps Integration: Implement AAM (Application Access Manager) to secure secrets in CI/CD pipelines and automate credential fetching for robotic process automation (RPA).
07
Stakeholder Management: Provide expert recommendations to client CISOs and IT Directors on PAM roadmap, risk mitigation, and compliance (SOX, PCI-DSS, HIPAA).
Technology stack
Tools & Technologies.
The platforms and technologies you'll use to build modern, enterprise-grade solutions.
01
PAM
Required
02
CyberArk
Required
03
CyberArk PAS
Required
04
CyberArk EPV
Required
05
PVWA
Required
06
CPM
Required
07
PSM
Required
08
Vault
Required
09
PTA
Required
10
AAM
Required
11
Distributed Vault
Required
12
CVM
Required
13
Cluster Vault Manager
Required
14
Active Directory
Required
15
GPO
Required
16
OU
Required
17
Kerberos
Required
18
Linux security
Required
19
Unix security
Required
20
PowerShell
Required
Requirements
Skills & Experience.
We value curiosity, collaboration and continuous learning. If you don't meet every requirement but believe you can make an impact, we'd still love to hear from you.
Essential
Required Qualifications
2+ years experience in PAM domain (CyberArk, BeyondTrust, Delinea)
CyberArk PAS/EPV hands-on: Vault, PVWA, CPM, PSM (and/or PTA as listed)
Greenfield installation and upgrade experience for CyberArk components
Active Directory expertise: OUs, GPOs, Kerberos; multi-forest understanding
Linux/Unix security fundamentals
PowerShell automation
CyberArk REST APIs for automation/integration
Networking fundamentals: TCP/IP, load balancing concepts, SSL/TLS certificate management
Preferred
Nice to Have
CyberArk PTA (Privileged Threat Analytics)
Distributed Vaults
CVM (Cluster Vault Manager)
Custom CPM plugin development
Custom PSM connector development
AAM (Application Access Manager) integration for CI/CD and RPA
Cloud deployments on AWS (AMIs) or Azure
Infrastructure as Code: Terraform, CloudFormation
Compliance exposure: SOX, PCI-DSS, HIPAA
Experience advising stakeholders (CISO/IT Directors) on PAM roadmap and risk mitigation
What you'll gain
More Than Just A Job.
We're committed to helping every team member grow professionally, personally and technically while working on meaningful projects.
Global Exposure
Collaborate with international clients and multicultural teams on enterprise programmes.
Continuous Learning
Expand your expertise through mentoring, certifications and hands-on project experience.
Career Growth
Take ownership, develop leadership skills and grow your consulting career over time.
Flexible Working
Hybrid and remote collaboration designed around trust and delivering exceptional outcomes.
People First
Join a supportive culture where collaboration, respect and long-term relationships come first.
Enterprise Projects
Work on meaningful technology initiatives for leading organisations across industries.
Apply
Apply for Consultant – Cyber Identity (PAM/CyberArk)
One page, about two minutes. We only ask for what we actually need to have a first conversation.