Identity Security Specialist Solutions Engineer
A customer-facing pre-sales and advisory role serving as AHEAD's national identity-security expert, specializing in CyberArk, PIM, and PAM. Day to day involves leading assessments, workshops, demos and POVs, designing privileged-access architectures, and producing solution designs, proposals, and roadmaps for customers.
- Compensation
- $270K–$300K / yr
- Location
- United States
- Work setup
- Remote
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 4+ years
- Category
- Solutions engineering
- Posted
Skills
Must have
- 7+ years in cybersecurity, identity, cloud, technology consulting, or solutions engineering, including 4+ years focused on identity security
- Prior customer-facing pre-sales, solutions engineering, consulting, or security-architecture experience
- CyberArk experience in at least one enterprise program spanning two or more lifecycle stages (assessment, design, migration, implementation, integration, or operationalization)
- Practical expertise in PIM and PAM concepts, controls, workflows, and operating models
- Experience creating customer-facing proposals, solution designs, SOWs, services proposals, or equivalent pre-sales artifacts
- Ability to design and present identity-security architectures to technical practitioners and executive stakeholders
- Experience integrating privileged access with enterprise identity, cloud, endpoint, security operations, and ITSM platforms
- Strong written, verbal, whiteboarding, presentation, and customer-management skills
Nice to have
- CyberArk certification or equivalent demonstrated product expertise
- Experience with CyberArk Privilege Cloud, PAM Self-Hosted, Endpoint Privilege Manager, Secrets Manager, or related capabilities
- Experience with Microsoft Entra ID, Active Directory, Okta, SailPoint, Saviynt, Delinea, BeyondTrust, or comparable platforms
- Familiarity with identity threat detection and response, non-human identity, workload identity, and cloud entitlement management
- Consulting experience at a systems integrator, professional services firm, advisory practice, or technology provider
- Delivery experience standing up, configuring, migrating, or operationalizing privileged-access tooling
- Familiarity with NIST, CIS Controls, Zero Trust, SOX, PCI DSS, HIPAA, or other control frameworks relevant to privileged access
- Relevant certifications such as CISSP, CCSP, CyberArk, GIAC, or equivalent
Full description
AHEAD builds platforms for digital business. By weaving together advances in cloud infrastructure, automation and analytics, and software delivery, we help enterprises deliver on the promise of digital transformation.
At AHEAD, we prioritize creating a culture of belonging, where all perspectives and voices are represented, valued, respected, and heard. We create spaces to empower everyone to speak up, make change, and drive the culture at AHEAD.
We are an equal opportunity employer, and do not discriminate based on an individual's race, national origin, color, gender, gender identity, gender expression, sexual orientation, religion, age, disability, marital status, or any other protected characteristic under applicable law, whether actual or perceived.
We embrace all candidates that will contribute to the diversification and enrichment of ideas and perspectives at AHEAD.
AHEAD is hiring an Identity Security Specialist Solutions Engineer to serve as a national identity-security resource across AHEAD’s regions, account teams, delivery organization, and strategic partners.
This role specializes in CyberArk, Privileged Identity Management (PIM), and Privileged Access Management (PAM). The successful candidate will help customers assess privileged-access risk, design target-state architectures, select and size solutions, validate technical approaches, and build practical implementation roadmaps.
This is a customer-facing pre-sales and advisory role. The position shapes technical solutions, scopes services, supports proposals, and guides technical validation. Delivery teams own post-sale implementation and operational execution.
Responsibilities
- Serve as a national identity-security resource supporting qualified opportunities across AHEAD regions.
- Lead advisory discovery, technical sales calls, identity-security assessments, architecture workshops, demonstrations, POVs/POCs, and executive briefings.
- Design and present CyberArk-centered privileged-access architectures for workforce, administrator, vendor, service, machine, and non-human identities.
- Advise customers on privileged-account discovery, vaulting, credential rotation, onboarding, session management, monitoring, just-in-time access, least privilege, break-glass access, and shared-account reduction.
- Partner with delivery leadership to ensure proposed solutions are implementable and aligned with AHEAD’s professional and managed services capabilities.
- Create solution designs, configurations, sizing inputs, services proposals, statements of work, presentations, technical justifications, and customer roadmaps.
- Provide pricing and effort inputs for account and delivery teams; final commercial approval remains with the appropriate AHEAD leaders.