Identity Security Specialist Solutions Engineer

AHEAD builds platforms for digital business by combining cloud infrastructure, automation, analytics, and software delivery to support enterprise digital transformation. The Identity Security Specialist Solutions Engineer serves as a national identity-security resource, advising customers on CyberArk, Privileged Identity Management, and Privileged Access Management while designing architectures, supporting pre-sales activities, and guiding technical validation.

Responsibilities:

• Serve as a national identity-security resource supporting qualified opportunities across AHEAD regions
• Lead advisory discovery, technical sales calls, identity-security assessments, architecture workshops, demonstrations, POVs/POCs, and executive briefings
• Design and present CyberArk-centered privileged-access architectures for workforce, administrator, vendor, service, machine, and non-human identities
• Advise customers on privileged-account discovery, vaulting, credential rotation, onboarding, session management, monitoring, just-in-time access, least privilege, break-glass access, and shared-account reduction
• Partner with delivery leadership to ensure proposed solutions are implementable and aligned with AHEAD’s professional and managed services capabilities
• Create solution designs, configurations, sizing inputs, services proposals, statements of work, presentations, technical justifications, and customer roadmaps
• Provide pricing and effort inputs for account and delivery teams; final commercial approval remains with the appropriate AHEAD leaders
• Qualify opportunities based on technical requirements, business outcomes, decision process, funding, and customer readiness
• Define CyberArk and adjacent identity-security strategies across on-premises, AWS, Azure, GCP, SaaS, and hybrid environments
• Connect PIM/PAM strategy to IAM, IGA, MFA, SSO, ITDR, secrets management, cloud IAM, SIEM/SOAR, ITSM, and Zero Trust programs
• Work with OEM field teams on technical alignment, enablement, certifications, and active customer campaigns
• Contribute reusable architectures, discovery guides, workshop content, competitive insights, and enablement materials

Requirements:

• 7+ years of experience in cybersecurity, identity, cloud, technology consulting, or solutions engineering, including at least 4 years focused on identity security
• Prior customer-facing pre-sales, solutions engineering, consulting, or security-architecture experience
• Demonstrated CyberArk experience in at least one enterprise program spanning two or more lifecycle stages, such as assessment, design, migration, implementation, integration, or operationalization
• Practical expertise in PIM and PAM concepts, controls, workflows, and operating models
• Experience creating customer-facing proposals, solution designs, SOWs, services proposals, or equivalent pre-sales artifacts
• Ability to design and present identity-security architectures to technical practitioners and executive stakeholders
• Experience integrating privileged access with enterprise identity, cloud, endpoint, security operations, and ITSM platforms
• Strong written, verbal, whiteboarding, presentation, and customer-management skills
• CyberArk certification or equivalent demonstrated product expertise
• Experience with CyberArk Privilege Cloud, PAM Self-Hosted, Endpoint Privilege Manager, Secrets Manager, or related capabilities
• Experience with Microsoft Entra ID, Active Directory, Okta, SailPoint, Saviynt, Delinea, BeyondTrust, or comparable platforms
• Familiarity with identity threat detection and response, non-human identity, workload identity, and cloud entitlement management
• Consulting experience at a systems integrator, professional services firm, advisory practice, or technology provider
• Delivery experience standing up, configuring, migrating, or operationalizing privileged-access tooling
• Familiarity with NIST, CIS Controls, Zero Trust, SOX, PCI DSS, HIPAA, or other control frameworks relevant to privileged access
• Relevant certifications such as CISSP, CCSP, CyberArk, GIAC, or equivalent