At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data. In identity and access management at PwC, you will focus on confirming secure and efficient access to systems and data for employees and/or clients. Your work will involve the design and implementation of strategies to protect sensitive information and manage user identities.Focused on relationships, you are building meaningful client connections, and learning how to manage and inspire others. Navigating increasingly complex situations, you are growing your personal brand, deepening technical expertise and awareness of your strengths. You are expected to anticipate the needs of your teams and clients, and to deliver quality. Embracing increased ambiguity, you are comfortable when the path forward isn’t clear, you ask questions, and you use these moments as opportunities to grow.
Skills
Examples of the skills, knowledge, and experiences you need to lead and deliver value at this level include but are not limited to:
- Respond effectively to the diverse perspectives, needs, and feelings of others.
- Use a broad range of tools, methodologies and techniques to generate new ideas and solve problems.
- Use critical thinking to break down complex concepts.
- Understand the broader objectives of your project or role and how your work fits into the overall strategy.
- Develop a deeper understanding of the business context and how it is changing.
- Use reflection to develop self awareness, enhance strengths and address development areas.
- Interpret data to inform insights and recommendations.
- Uphold and reinforce professional and technical standards (e.g. refer to specific PwC tax and audit guidance), the Firm's code of conduct, and independence requirements.
Roles and Responsibilities: -
- Document, and prioritize PAM requirements across business, infrastructure, cloud, and application teams; create process maps, user stories, use cases, and acceptance criteria.
- Design and oversee implementation of CyberArk PAS (Vault, PVWA, CPM, PSM, PTA) and Delinea platforms (Secret Server, Privilege Manager, Connection Manager, Distributed Engines) on-prem and/or cloud.
- Define and implement user policies, certification campaigns, and privileged account provisioning and de-provisioning workflows (joiner/mover/leaver, access request/approval, recertification).
- Manage onboarding of target systems and applications into CyberArk and Delinea, including Windows, Unix/Linux, databases, web portals, RDP/Citrix published apps, network devices, and cloud services (AWS/Azure/GCP).
- Configure and optimize discovery tools for accounts, services, SSH keys, and tasks (CyberArk discovery services; Delinea Discovery Scanner), including auto-detection and auto-onboarding.
- Implement application-to-application credential delivery:
- CyberArk AAM/CCP and PAS Web Services for secrets injection.
- Delinea AAPM/Secret Server SDK and REST for credential brokering.
- Define and implement vaulting, rotation, and heartbeat policies for human and non-human identities; enable SSH key and password rotation, check-out/check-in, dual control, and break-glass.
Required skills and experience:
-
- 4+ years of hands-on implementation experience with CyberArk PAM or Delinea (Thycotic) Secret Server and Privilege Manager, including installation, configuration, and migration.
- Proven work in designing policies, certifications/attestations, workflows, and custom connectors/integrations for PAM.
- Proficiency deploying and configuring:
- CyberArk: Vault, PVWA, CPM, PSM, PTA, platforms, connection components, plugins.
(or)
- Delinea: Secret Server (on-prem/cloud), Connection Manager, Distributed Engines/Scanners, Session launchers, Password management connectors, Privilege Manager (endpoint elevation policies and application control).
- Strong knowledge of account/service discovery, auto-onboarding, password/SSH key rotation, and task scheduling across both platforms.
- Experience managing access to Windows, Unix/Linux, web portals, and RDP/Citrix published applications.
- Automation and scripting with at least one: Python, PowerShell, or Shell; solid use of REST APIs and SDKs. AutoIT or equivalent for connector customization is a plus.
- Ability to create custom scanners and custom reporting in Delinea.
- Understanding of DevOps concepts: provisioning from scratch, service setup, and CI/CD integrations for secrets management and credential injection.
- Familiarity with HA/DR architecture, certificates/TLS/PKI, load balancers, and enterprise hardening standards.
- Strong documentation, stakeholder management, and Agile delivery skills (backlog management, sprint ceremonies, UAT facilitation).
Required Certifications: -
CyberArk
- CyberArk Sentry (Mandatory)
- CyberArk Certified Delivery Engineer – Privilege Access Manager (CDE-PAM) (On-Prem)
- CyberArk Certified Delivery Engineer – Privilege Cloud (CDE-CPC)
(or)
Delinea
- Certified Engineer – Secret Server
- Certified Engineer – Privilege Manager
Professional and Educational Background
BTech/BE, MCA/MBA or equivalent
