Manager, Privileged Access Management Solutions Architect

The KPMG Advisory practice is at the forefront of transformation, providing exceptional opportunities for individuals to advance their careers and expertise within KPMG. We are committed to fostering both personal and professional development, creating new pathways for growth. In an ever-evolving market, our professionals thrive in a collaborative, team-driven culture, making our people our number one priority. With a wealth of learning and career advancement opportunities, world-class training facilities, and cutting-edge market tools, we support our team in growing both professionally and personally. If you're looking for a dynamic environment where you can be your authentic self, have a meaningful impact, enhance your skills, and explore new areas of inspiration, consider a career in Advisory. KPMG is seeking a Manager, Privileged Access Management Solutions Architect and Lead Engineer to join our Advisory Services practice. Responsibilities: • Design and lead the implementation of Privileged Access Management (PAM) solutions to support enterprise-wide Identity & Access Management (IAM) initiatives. • Act as the technical lead for PAM deployments, including CyberArk On-Prem and SaaS solutions, implementing privileged account management, session management, just-in-time access, and endpoint management capabilities. • Collaborate with IT and Security Architecture teams to design PAM solutions aligned with project requirements and industry best practices; work with cloud engineering teams to integrate PAM capabilities across hybrid and multi-cloud environments. • Oversee the entire PAM lifecycle, including discovery, testing, onboarding, access workflows, break glass processes, policy design, and integration with enterprise controls/platforms such as IdP, SIEM, ITSM, and IGA systems. • Develop automation strategies to accelerate deployment tasks, including onboarding, policy deployment, and reporting using tools such as Terraform, Ansible, PowerShell, Python, and REST APIs; ensure robust integration with adjacent security solutions. • Conduct privileged access risk assessments and formulate remediation strategies aligned with regulatory and security frameworks (e.g., NIST CSF/800-53, ISO 27001, SOX, PCI DSS). • Lead client-facing delivery, including scope estimation, risk/issue/dependency management, technical workshop facilitation, and oversight of technical workstreams; provide mentorship and guidance to engineering teams and collaborate with cross-functional stakeholders. • Uphold KPMG's respectful and courteous work environment through integrity, professionalism, and personal responsibility. Qualifications: • Minimum five years of experience in IT security, IAM, or Privileged Access Management roles. • Bachelor's degree from an accredited college or university; CyberArk Certified Delivery Engineer (CDE) or CyberArk Endpoint Privilege Manager (EPM) Certification preferred. • Strong expertise in PAM technologies with hands-on experience in architecting and engineering CyberArk solutions; familiarity with secrets management platforms and other PAM solutions is preferred. • Experience integrating PAM with cloud services (e.g., Azure, AWS, GCP); knowledge of systems administration and networking principles; proficiency in scripting and automation to streamline tasks. • Demonstrated understanding of IAM concepts, security controls, and regulatory expectations regarding privileged access. • Excellent analytical, communication, and problem-solving skills with the ability to lead technical discussions and manage complex engineering projects. • Ability to travel as needed. • Applicants must be authorized to work in the U.S. without employment-based visa sponsorship, as KPMG will not sponsor applicants for U.S. work visa status for this opportunity. KPMG offers a comprehensive compensation and benefits package, including various health plans, vision coverage, 401(k) plans, and personal well-being benefits. Additional details about our benefits can be found on the KPMG US Careers site. KPMG conducts recruitment on a rolling basis. Candidates are encouraged to apply expeditiously for roles they qualify for and are interested in. Address: KPMG LLP and its affiliates comply with all local/state regulations regarding recruitment and hiring. Material job duties for this position are listed above.