CyberArk PAM
Description
This role is responsible for hands-on execution of a high-risk access reduction initiative focused on Active Directory privileged access across server and workstation environments. The consultant will analyze, remediate, and reduce standing administrative access by untangling nested AD group structures, validating access with application and infrastructure teams, and enabling transition to CyberArk Just-In-Time (JIT) access models.
Key Responsibilities:
ā¢ Analyze and flatten complex, nested Active Directory group structures (server and workstation admin groups)
ā¢ Identify and document effective access across multi-level group nesting
ā¢ Partner with application and infrastructure teams to validate required vs. excessive access
ā¢ Drive removal of unnecessary privileged access and track measurable reductions
ā¢ Execute cleanup of local administrator rights across servers and workstations
ā¢ Produce before/after reporting on privileged access reduction (group size, membership, exposure)
ā¢ Support onboarding of eligible teams to CyberArk JIT / ephemeral access models
ā¢ Create clear documentation of group ownership, purpose, and access justification
ā¢ Work through backlog of remediation tasks and drive closure
Required Qualifications:
ā¢ Strong hands-on experience with Active Directory, including:
ā¢ Nested group analysis
ā¢ Admin group structures (domain, server, workstation)
ā¢ Access inheritance and effective permissions
ā¢ Proven experience performing AD or privileged access cleanup/remediation at scale
ā¢ PowerShell scripting experience (required)
ā¢ Ability to extract, analyze, and report on AD group membership
ā¢ Experience working in multi-domain / multi-forest environments
ā¢ Familiarity with Windows server and workstation administration models
ā¢ Experience with PAM concepts and tools (CyberArk preferred)
ā¢ Ability to manage and track work across a backlog of remediation tasks
ā¢ Strong communication skills to engage with technical teams and validate access requirements
Preferred Qualifications:
ā¢ Experience with CyberArk (Privilege Cloud, EPM, or similar)
ā¢ Experience with JIT / Zero Standing Privilege models
ā¢ Experience in large enterprise environments (10k+ endpoints)
ā¢ Experience with data analysis/reporting (Excel, Power BI, etc.)
Apply Now
Apply Now
This role is responsible for hands-on execution of a high-risk access reduction initiative focused on Active Directory privileged access across server and workstation environments. The consultant will analyze, remediate, and reduce standing administrative access by untangling nested AD group structures, validating access with application and infrastructure teams, and enabling transition to CyberArk Just-In-Time (JIT) access models.
Key Responsibilities:
ā¢ Analyze and flatten complex, nested Active Directory group structures (server and workstation admin groups)
ā¢ Identify and document effective access across multi-level group nesting
ā¢ Partner with application and infrastructure teams to validate required vs. excessive access
ā¢ Drive removal of unnecessary privileged access and track measurable reductions
ā¢ Execute cleanup of local administrator rights across servers and workstations
ā¢ Produce before/after reporting on privileged access reduction (group size, membership, exposure)
ā¢ Support onboarding of eligible teams to CyberArk JIT / ephemeral access models
ā¢ Create clear documentation of group ownership, purpose, and access justification
ā¢ Work through backlog of remediation tasks and drive closure
Required Qualifications:
ā¢ Strong hands-on experience with Active Directory, including:
ā¢ Nested group analysis
ā¢ Admin group structures (domain, server, workstation)
ā¢ Access inheritance and effective permissions
ā¢ Proven experience performing AD or privileged access cleanup/remediation at scale
ā¢ PowerShell scripting experience (required)
ā¢ Ability to extract, analyze, and report on AD group membership
ā¢ Experience working in multi-domain / multi-forest environments
ā¢ Familiarity with Windows server and workstation administration models
ā¢ Experience with PAM concepts and tools (CyberArk preferred)
ā¢ Ability to manage and track work across a backlog of remediation tasks
ā¢ Strong communication skills to engage with technical teams and validate access requirements
Preferred Qualifications:
ā¢ Experience with CyberArk (Privilege Cloud, EPM, or similar)
ā¢ Experience with JIT / Zero Standing Privilege models
ā¢ Experience in large enterprise environments (10k+ endpoints)
ā¢ Experience with data analysis/reporting (Excel, Power BI, etc.)
Apply Now
Apply Now