Hands-on training with a lab for every learner
Day-wise, basic to advanced. Sessions run from two to eight hours a day, scheduled in your time zone, with an isolated environment each participant can break and rebuild.
Leave your team able to run it
Enablement is the difference between a platform your team owns and one that depends on a vendor forever. Training is bundled into most implementation engagements for exactly that reason.
PAM Foundation
For engineers new to Idira (formerly CyberArk) who need to operate a deployment confidently.
View syllabus →PAM Advanced
For engineers already running PAM who need to extend and troubleshoot it.
View syllabus →ISPSS & Cloud
For teams moving privileged access into cloud and DevOps pipelines.
View syllabus →Corporate batches
Curriculum mapped to your actual deployment, delivered on-site or remotely to your team.
View syllabus →Every learner gets their own environment
Slides teach concepts. Labs teach competence. Each participant is provisioned a complete environment on day one, and the advanced programme starts every module from a deliberately broken state.
- Isolated vault, connector servers and target systems per participant
- Live for the programme and two weeks after it ends
- Failures are the curriculum: break it, diagnose it, rebuild it
- Corporate batches mirror your own topology and versions

Ready to build the team you need?
Corporate batches are scoped to your deployment and scheduled in your time zone. Open cohorts run for individual engineers.
These principles guide every engagement
They define how we design, deliver and operate identity security for our customers.
Certified, not just familiar
Guardian-led, with CDE credentials across PAM, Privilege Cloud, EPM and Secrets Manager, kept current on every release.
Architect-led delivery
Design is reviewed and signed off before anything is built, so what goes live is what was agreed.
Written scope, fixed price
Deliverables, timeline and price in writing before work starts. No open-ended retainers.
Enablement built in
Your team is trained during delivery, so what we build does not depend on us to keep running.
Need identity security you can trust?
Talk to a certified architect about protecting privileged access, identities and critical systems. The first call is technical, not a sales pitch.
