Consultant: PAM, Privileged Access, Identity, CyberArk, Active Directory, Cloud, Connectors

Our Global Enterprise client is hiring a Consultant with excellent experience in implementing and troubleshooting PAM Solutions.

Start Date: ASAP
Duration: 100 Days (initially)
Rate: up to £560 Per Day (Please Note, Employer NI is paid for by the client)
IR35 Status: Inside
Location: London and Remote
NOTE: Active SC Clearance is highly desirable.

Technical Skills:

• Implement Platform Policies for PSM/CPM/PSM-SSH
• Implement and troubleshoot Privilege Cloud connectors
• First/Second/Third line support for early-life and implementation issues
• Create policies on how to configure the ecosystem for a technology platform (safe permissions, safe-naming policies, recording policies, password policies, end-user experience, on boarding processes) based on discussed requirements with multiple stakeholder teams
• Connector server hardening, maintenance, best-practice
• Operational management - LB clustering, RDS licensing, certificates, connector deployment, health alerting
• Develop custom CPM connectors (Windows - standalone/AD/EntraID, Linux - Password/Keys/Certificate, MSSQL standalone/AzureManaged/AWS-RDS, Oracle AWS-RDS, MySQL AWS-RDS, PostgreSQL AWS-RDS)
• Implement connector pools and dynamic resource policies for on-premises, Azure, AWS
• Implement SSH, RDP, and Database connectors
• Implement DPA integration to AWS, Azure (GCP)
• Manage recordings/audit trail
• Implement SCA integration to AWS, Azure (GCP)
• Create policies to support appropriate access to privileged access to roles based on discussed requirements with multiple stakeholder teams
• Configure and manage SWS for recording of SCA sessions
• Documentation
• Infrastructure low-level design
• Privilege Cloud Platform policies (for each supported technology platform)
• DPA, SCA, Conjur, Identity
• Manage Identity connectivity to multiple instances of EntraID (SAML or OIDC)
• Manage Identity connectivity to multiple instances of Active Directory
• User merging where appropriate between AD and EntraID
• Manage 2FA and other login policies to support all appropriate use-cases
• Manage Identity SSO connectors for end-users
• Develop, document, and test DR failover processes for various cases;

1. Component failure
2. On-premises datacentre Site failure
3. Outage of CyberArk SaaS services, ServiceNow services, Active Directory, EntraID services, Conjur

• Extend existing single node to a failover cluster on primary site
• Create DR cluster
• Implement and manage LDAP integration policies
• Harden Conjur implementation
• Manage LOBs for Privilege Cloud sync
• API/Developer
• Implement Flows to handle workflows for approval based on manager/peer approval for SCA requests
• Implement Flows to handle workflows for approval based on manager/peer approval for DPA requests
• Assist with integration to Sailpoint via API (SCIM integration)
• Assist with integration to reporting services via API
• Scripting support for operational tooling (powershell etc)

To apply for this Privileged Access Consultant contract job, please click the button below and submit your latest CV.

Curo Services endeavours to respond to all applications, however this may not always be possible during periods of high volume. Thank you for your patience.

Curo Services is a trading name of Curo Resourcing Ltd and acts as an Employment Business for contract and temporary recruitment as well as an Employment Agency in relation to permanent vacancies.