Professional Services Consultant - Cyber Ark

Role & responsibilities :

1. Solution Design & Architecture

• Work with customers to understand their PKI, certificate management, infrastructure, security, and operational requirements.
• Design scalable and secure PKI and Certificate Lifecycle Management solutions.
• Develop solution architectures covering certificate authorities, registration authorities, certificate stores, HSMs, integrations, and automation.
• Conduct architecture reviews and technical design sessions with customer stakeholders.
• Translate business and technical requirements into practical implementation plans.

2. CLM & PKI Implementation

• Lead end-to-end Professional Services engagements from design through implementation and operational handoff.
• Deploy, configure, and integrate CLM and PKI solutions within enterprise environments.
• Implement and manage X.509 certificates, multi-tier CA architectures, RAs, CRLs, OCSP, and HSM integrations.
• Configure certificate issuance, renewal, revocation, and lifecycle management processes.
• Troubleshoot complex PKI, certificate, authentication, and integration issues in production environments.

3. Enterprise Infrastructure & Identity Integration

• Integrate CLM/PKI solutions with enterprise infrastructure and identity platforms.
• Work with Microsoft Active Directory, AD CS, ADFS, and LDAP environments.
• Support integrations across Windows Server and Linux/Unix environments.
• Work with enterprise networking and security infrastructure to ensure reliable certificate deployment and management.
• Troubleshoot certificate-related issues across applications, infrastructure, identity, and network environments.

4. Cloud & Hybrid Environments

• Implement and support CLM/PKI solutions across AWS, Microsoft Azure, and Google Cloud Platform (GCP).
• Work across hybrid and self-hosted enterprise environments.
• Support deployments involving VMware and Hyper-V environments.
• Design and implement solutions considering high availability, resilience, and disaster recovery requirements.
• Help customers establish consistent certificate management practices across on-premises and cloud environments.

5. Certificate Automation & Optimization

• Identify opportunities to automate certificate issuance, renewal, deployment, and revocation.
• Help customers reduce manual certificate management and minimize certificate-related service disruptions.
• Integrate CLM capabilities with enterprise applications, infrastructure, identity systems, and security platforms.
• Optimize certificate lifecycle processes based on customer requirements and operational best practices.
• Support the expansion of automation capabilities across enterprise environments.

6. Customer Consulting & Workshops

• Lead technical discovery sessions, architecture workshops, design reviews, and implementation meetings.
• Engage with security, infrastructure, networking, cloud, application, and identity teams.
• Explain complex PKI and certificate concepts to both technical and business stakeholders.
• Provide clear, actionable recommendations aligned with customer objectives.
• Serve as a trusted technical advisor throughout the engagement.

7. Testing, Troubleshooting & Production Readiness

• Develop and execute implementation and validation plans.
• Troubleshoot complex technical issues across PKI, certificates, infrastructure, applications, and integrations.
• Support production deployments and transition activities.
• Validate solution functionality, security, scalability, and operational readiness.
• Identify implementation gaps and recommend corrective actions.

8. Documentation & Knowledge Transfer

• Create technical documentation including:
• Solution architecture
• Implementation designs
• Configuration guides
• Integration documentation
• Operational procedures
• Troubleshooting guides
• As-built documentation
• Conduct knowledge transfer and enablement sessions for customer teams.
• Ensure customers are able to operate and maintain the deployed solution effectively after project completion.

9. Engagement & Stakeholder Management

• Manage multiple customer engagements while maintaining delivery quality and timelines.
• Coordinate with customers, partners, internal engineering/product teams, and other stakeholders.
• Proactively identify technical, delivery, and dependency risks.
• Ensure effective communication throughout the engagement lifecycle.
• Support successful operational handoff at the conclusion of Professional Services engagements.

Required Qualifications & Experience

Education & Professional Background

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent practical experience.
• 5+ years of experience in technical consulting, Professional Services, managed services, enterprise software delivery, cybersecurity, or related technical domains.
• Demonstrated experience delivering customer-facing technical projects from solution design through implementation, testing, and knowledge transfer.

PKI & Certificate Lifecycle Management

Strong hands-on expertise in:

• Public Key Infrastructure (PKI)
• Certificate Lifecycle Management (CLM)
• X.509 certificates
• Certificate Authorities and multi-tier CA architectures
• Registration Authorities (RA)
• Certificate revocation
• CRL and OCSP
• Hardware Security Modules (HSM)
• Cryptography and modern cryptographic practices
• Certificate-based authentication and trust relationships

Infrastructure & Identity

• Strong understanding of enterprise networking.
• Hands-on experience with Windows Server and Linux/Unix environments.
• Experience with:
  
• Active Directory
• Microsoft AD CS
• ADFS
• LDAP
• Ability to troubleshoot certificate and PKI issues across enterprise infrastructure.

Cloud & Virtualization

• Experience with one or more major cloud platforms, preferably:
• AWS
• Microsoft Azure
• Google Cloud Platform (GCP)
• Understanding of hybrid and self-hosted environments.
• Familiarity with VMware and Hyper-V.
• Understanding of high-availability and disaster-recovery architectures.

Consulting & Customer-Facing Skills

• Proven experience leading customer-facing technical engagements.
• Ability to conduct technical workshops and architecture sessions.
• Strong troubleshooting and problem-solving capabilities.
• Excellent written and verbal communication skills.
• Ability to translate complex technical concepts into clear recommendations.
• Ability to work effectively with both technical and business stakeholders.
• Strong ownership of customer outcomes and project delivery.

Preferred Qualifications

• Experience with TLS/SSL-enabled technologies such as:
  
• F5
• Citrix NetScaler
• IIS
• Apache HTTP Server
• Oracle WebLogic
• IBM WebSphere
• Experience with Microsoft SQL Server, including installation, configuration, and maintenance.
• Experience deploying enterprise software within customer environments, particularly for a software vendor.
• Previous experience in Professional Services or technical consulting.
• Experience with certificate automation and management standards such as ACME.
• Industry-recognized security certifications such as:
  
• CISSP
• GIAC
• Other relevant security certifications.

Preferred candidate profile :

• PKI & Certificate Lifecycle Management: PKI, CLM, X.509 certificates, Certificate Authorities, Registration Authorities, CRL, OCSP, and HSM.
• Security & Cryptography: Cryptography, TLS/SSL, certificate-based authentication, and modern cryptographic practices.
• Identity & Directory Services: Microsoft Active Directory, AD CS, ADFS, and LDAP.
• Enterprise Infrastructure: Windows Server, Linux/Unix, enterprise networking, and security infrastructure.
• Cloud & Virtualization: AWS, Microsoft Azure, GCP, VMware, and Hyper-V.
• Enterprise Applications: F5, Citrix NetScaler, IIS, Apache HTTP Server, Oracle WebLogic, and IBM WebSphere.
• Solution Architecture & Implementation: Technical discovery, solution design, deployment, configuration, integration, testing, and production readiness.
• Customer Consulting: Technical workshops, architecture sessions, stakeholder management, technical advisory, and customer engagement.
• Troubleshooting & Problem Solving: Root-cause analysis and resolution of complex PKI, certificate, infrastructure, identity, and integration issues.
• Documentation & Knowledge Transfer: Architecture documentation, implementation guides, operational procedures, troubleshooting guides, as-built documentation, and customer training.
• Automation & Integration: Certificate lifecycle automation, system integrations, orchestration, and process optimization.

Note: Interested Candidates, Please share their resume at Vandna.gupta@trantorinc.com