Technical Consultant

• Client Delivery

• Facilitate sessions of strategy, roadmap, design, and planning workshops for small to medium sized service engagements

• Ensure that customer expectations are appropriately set and managed

• Drive and manage the objectives, requirements gathering, project tasks/milestone, project status, dependencies, and timelines, to ensure engagements are delivered successfully and on time while meeting the business objectives

• Creation and finalization of project deliverables, may perform peer review for collateral developed by others on a delivery team

• Presentation of deliverables to client executive management

• Knowledge of AHEAD’s project lifecycle management activities to effectively support delivery engagements throughout the duration of a project

• Business Development

• Support business development pursuits through client discovery meetings

• Represent service offerings during the sales cycle, including project scoping, proposal development, and presenting proposals to clients

• Knowledge of AHEAD’s sales management lifecycle to effectively support sales opportunities throughout the duration of a proposal

• Assist Principal Consultants and Security Sales Specialists with engagement scoping and the creation of proposal collateral

• Practice Development & Thought Leadership

• Maintain subject matter expertise in a minimum of four security domains or three security solutions

• Participate in the development, enhancement, and standardization of AHEAD in-practice service offerings

• Enables more than one service capability

• Maintain a broad knowledge and understanding of current and future state IT trends, technologies, and standards

• Lend support and mentorship to Associates

Responsibilities:

• Cloud Security Architecture & Risk Strategy:

• Proven experience in reviewing and implementing secure cloud reference architectures and landing zones.

• Ability to translate risk strategy by mapping traditional lift-and-shift approaches into cloud-native security controls.

• Strong understanding of multi-cloud governance models, including Infrastructure-as-Code (IaC), policy-as-code (PaC), tagging standards, and multi-account strategies.

• CNAPP Tooling:

• 2+ years of combined hands-on experience with CNAPP tools, particularly Wiz and Prisma Cloud.

• Expertise in integrating Wiz and Prisma Cloud with enterprise tooling such as ServiceNow, CI/CD pipelines, and ticketing/alerting workflows.

• Able to clearly and concisely communicate Wiz/Prisma outputs (criticality, risk, remediation) to technical and business stakeholders.

• Strong track record in deploying and instantiating Prisma Cloud.

• Cloud Platforms & Native Security Controls:

• 2+ years of experience working with AWS, Azure, and/or GCP.

• Familiarity with cloud-native security services such as AWS Security Hub, Microsoft Defender for Cloud, and Google Security Command Center.

• Hands-on knowledge of cloud identity (IAM, Federation, RBAC) across multi-cloud environments.

• Familiarity with IDaaS solutions such as Okta and Entra ID.

• Security Frameworks & Governance:

• Strong knowledge of security standards and frameworks: CIS Benchmarks, NIST, FedRAMP, ISO 27001, GDPR.

• Ability to design and map cloud-specific controls for audit and compliance needs.

• Experience with SIEM integration (Splunk, Sentinel, Chronicle) and cloud-native detection capabilities.

• Automation, IaC & Container Security:

• Ability to read, understand, and apply Infrastructure-as-Code (Terraform, Bicep, AWS CloudFormation).

• Familiarity with policy-as-code tooling (OPA, Sentinel) and IaC scanning in CI/CD pipelines.

• Proficiency in scripting (Python, PowerShell, Bash) to automate security tasks.

• Experience with containerization (Docker, Kubernetes) and securing workloads at scale.