Privileged Access Management (PAM) with CyberArk and Delinea Corporate Training
Take back privileged access: vault credentials, watch sessions, and control elevation.
This instructor-led program teaches your team to run privileged access management with CyberArk and Delinea: vaulting and rotating shared credentials, proxying and recording admin sessions, managing application secrets, and granting vendors secure remote access. Every module pairs concepts with guided labs, ending in a capstone where your team produces a complete PAM deployment blueprint.
Instructor-led group trainingVirtual / on-site / off-site10 languagesDelivered inEnglish, Spanish, Mandarin, German, Arabic, Portuguese, Hindi, French, Japanese, Italian100+ countriesWe have delivered inUnited States, United Kingdom, India, Canada, Germany, France, Netherlands, UAE, Saudi Arabia, Singapore, Australia, Japan, Brazil, South Africa and 90+ more countries
How we build a privilege-controlled team
THE EDSTELLAR PRIVILEGED ACCESS CAPABILITY MODEL
Assess privileged exposure
Skill checks map your team's vaulting, session, and secrets baseline.
Standardize vaulting
Credential storage and rotation become consistent and automatic.
Practice PAM in labs
Guided labs build sessions, secrets handling, and break-glass drills.
Measure control coverage
Vault and session metrics show what improved.
Scale the program
Repeatable playbooks extend PAM to every privileged account.
Need more than one program?Get a group quote
Trusted as a Leading Corporate Training Provider by
Program Overview: What is Privileged Access Management (PAM) with CyberArk and Delinea?
Privileged Access Management (PAM) with CyberArk & Delinea is an instructor-led technical program for security engineers and IT operations teams that guard an organization's most targeted accounts. It covers the full PAM remit: credential vaulting with automatic rotation, privileged session proxying and monitoring, application secrets management, secure third-party remote access, and the policies and break-glass procedures that keep the program running.
Across six modules and 24 instructor-led hours, teams move from the privileged threat model to a working deployment plan. Guided labs have participants map privileged account types by compromise impact, onboard accounts into a lab CyberArk vault with rotation, route admin sessions through a session manager and replay recordings, store application secrets in Delinea, and grant time-bound vendor access. Instructors also coach teams through drafting PAM policies and testing break-glass procedures under pressure. The program closes with the PAM Deployment Blueprint capstone.
Most breaches trace back to the same weakness: standing admin rights, shared credentials, and service accounts nobody rotates, which is exactly where attackers start. Without disciplined vaulting and session control, every admin login is an unmanaged risk. This program teaches teams to vault and rotate credentials systematically, monitor privileged sessions, and give vendors access that expires instead of access that lingers.
For the capstone, each team produces a complete PAM deployment blueprint for a fictional enterprise: an account discovery and prioritization plan, a CyberArk vault architecture with rotation schedules, session management policies with recording and review workflows, a Delinea-based secrets and vendor-access design, and tested break-glass runbooks. Instructors review the blueprint against common rollout failures, from unmapped service accounts to break-glass procedures that fail when actually needed. The blueprint is a deployment plan the team can lift and adapt to its real environment.
Across six modules your team moves from the privileged threat model to a working deployment plan. You will map privileged account types by compromise impact, onboard accounts into a lab CyberArk vault with rotation, route admin sessions through a session manager and replay recordings, store application secrets in Delinea and grant time-bound vendor access, draft PAM policies and test break-glass procedures, and finish with a capstone: a complete PAM deployment blueprint for a fictional enterprise, presented for instructor review. Everything is hands-on and transfers directly to your own estate.
What's Included in this Workshop for Your Enterprise Teams
- 1
Vaulting labs
Onboard and rotate credentials.
- 2
Session labs
Proxy and replay admin sessions.
- 3
Secrets labs
Handle secrets and vendor access.
- Instructor-led delivery across virtual, onsite, and hybrid
- Guided labs in every module with instructor coaching
- Capstone PAM blueprint, reviewed with your team
- Flexible scheduling around your calendar
- Lab guides, policy templates, and onboarding checklists included
- Group size and batches set along with your coordinator
Build your team's skills. Anywhere in the world.
Real-world use cases
from day one
Instructor-led training
for your teams
Delivered globally
in 100+ countries
Enterprise Training Solutions Customized for Your Company
One partner for instructor-led corporate training, delivered the way your teams work.
Request a Training Quote- Customized Training Delivery
- Scale Your Training: Small to Large Teams
- In-person Onsite, Live Virtual or Hybrid Training Modes
- Plan from 2000+ Industry-ready Training Programs
- Hands-On Labs on Live Infrastructure, Led by Industry Experts
Privileged Access Management (PAM) with CyberArk and Delinea Course Topics and Program Outline
A tailored 24-hour, six-module workshop: one learning journey from the privileged threat model to a capstone PAM deployment blueprint. Sessions pair concepts with labs in realistic PAM tenants. Materials include policy templates and checklists.
Built by Edstellar with privileged access practitioners
Built by practitioners who deploy CyberArk and Delinea PAM in production, shaped around your platforms and estate.
Skill checks baseline your team's privileged access, vaulting, and session monitoring knowledge.
Instructor-led sessions cover the privileged threat model, vaulting concepts, and session controls.
Guided labs vault credentials, manage live sessions, and handle secrets in lab tenants.
Your team designs a full PAM deployment blueprint in the capstone and presents it for review.
From vaulting fundamentals to a capstone PAM deployment blueprint, every skill is practiced in guided labs.
Delivered as
Delivered as a hybrid program of live instruction and guided labs, scheduled around your team's calendar in flexible batches.
Map privileged account types across a sample estate and rank each by compromise impact.
learna)Why privileged accounts top every attacker's list
b)Credential theft, pass-the-hash, and lateral movement
c)PAM program scope: vaulting, sessions, and elevation
d)CyberArk and Delinea: where each product fits
Onboard sample privileged accounts into a lab CyberArk vault and configure automatic password rotation.
practicea)CyberArk vault architecture and safe design
b)Onboarding accounts and configuring rotation policies
c)Retrieving credentials through approved workflows
d)Auditing vault access and rotation compliance
Route admin sessions through a lab session manager, then replay a recording to spot risky commands.
practicea)Session proxying: how PAM brokers connections
b)Recording, keystroke logging, and session replay
c)Real-time alerting on risky session behavior
d)Isolating sessions from endpoint compromise
Store application secrets in a lab Delinea vault and grant a vendor time-bound remote access.
practicea)Delinea Secret Server: vaulting application secrets
b)Secure remote access for vendors and third parties
c)Privilege elevation on endpoints without standing admin rights
d)Choosing between CyberArk and Delinea capabilities
Draft a PAM policy, plan a phased onboarding wave, and test a break-glass procedure end to end.
applya)Writing PAM policies teams will actually follow
b)Phased onboarding: discovery to full enforcement
c)Break-glass accounts: design, monitoring, and drills
d)Measuring PAM coverage and control health
Produce a complete PAM deployment blueprint for a fictional enterprise and present it for instructor review.
applya)Blueprint scoping: accounts, systems, and risk priorities
b)Integrating CyberArk and Delinea into one architecture
c)Rollout plan: waves, owners, and success metrics
d)Capstone presentation and instructor feedback
Customize this program tailored to your team?
Tell us your training needs: what your team already works with, the level they’re at, and the topics you want them to focus on. We’ll adjust the modules, duration and hands-on labs, and send you a customized outline for your group.
Key Skills and Outcomes Your Team Will Gain
Practical privileged access skills your team applies immediately: vaulting credentials, controlling sessions, and managing secrets.
Explain the privileged threat model
Describe credential theft and lateral movement paths attackers exploit.
Vault privileged credentials
Onboard accounts into CyberArk and configure automatic rotation policies.
Manage privileged sessions
Proxy, record, and monitor admin sessions with real-time alerting.
Handle secrets with Delinea
Store application secrets and grant secure third-party remote access.
Write PAM policies
Author enforceable policies covering checkout, elevation, and break-glass.
Plan phased onboarding
Sequence discovery, pilot, and enforcement waves across the estate.
Report PAM program health
Measure coverage, rotation compliance, and session control effectiveness.
Teams that Benefit from this Privileged Access Management (PAM) with CyberArk and Delinea Group Training
This group training is built for security engineers, IAM staff, and infrastructure admins who own privileged access, and for GRC staff who must prove it is controlled. Content adapts to each cohort's roles, PAM platforms, and estate, so every batch practices the workflows it owns, from vaulting to session review.
Own the privileged attack surface
For security engineers who design and run PAM controls and need vaulting, session, and secrets skills.
Workflow friction
- Shared admin passwords
- Unmonitored vendor access
- Secrets in code and configs
How the program helps
- Vault credentials with rotation
- Monitor privileged sessions live
- Cut standing admin rights
Practice use cases
- vault onboarding
- session replay
- secrets rotation
Extend identity governance upward
For IAM teams adding privileged access to their remit, connecting PAM with lifecycle governance.
Workflow friction
- PAM managed in silos
- Elevation outside policy
- Inconsistent approvals
How the program helps
- Link PAM to identity lifecycle
- Govern elevation requests
- Unify access reporting
Practice use cases
- elevation workflows
- policy authoring
- access reporting
Administer without the risk
For sysadmins and network engineers who use privileged access daily and need safe, fast workflows.
Workflow friction
- Password sprawl
- Slow access checkout
- Risky local admin habits
How the program helps
- Check out credentials safely
- Get just-in-time elevation
- Keep break-glass ready
Practice use cases
- credential checkout
- JIT elevation
- break-glass drills
Prove privileged controls work
For audit and compliance staff who must show privileged access is controlled, monitored, and reviewed.
Workflow friction
- Audit findings on admins
- Missing session records
- Unclear vault ownership
How the program helps
- Evidence every session
- Show rotation compliance
- Report PAM coverage
Practice use cases
- session evidence
- rotation reports
- coverage metrics
Cohorts train as a cross-functional workforce, with each small group aligned on shared privileged access standards.
Prerequisites: This program benefits security engineers, IAM staff, infrastructure administrators, and vault administrators responsible for privileged access. Basic IT familiarity helps but is not required, and no prior CyberArk or Delinea experience is needed. Content adapts to each cohort's PAM platforms and estate.
Security Analyst to PAM Program Lead
Tracks how practitioners progress from privileged access fundamentals to leading PAM deployments across the program's learn, practice, and apply phases.
A program that grows with security careers, from first vaulted credential to leading enterprise PAM programs.
Mixed cohort, or several teams at once?
We can tailor the training to different teams, roles, and experience levels within the same program.
Certificate of Training Completion.
On successful completion, employees receive an Edstellar course completion certificate, recognizing their commitment to ongoing learning and professional development. It validates the skills they have built and motivates them to keep growing and contribute to organizational success.
Earned, not attended. Awarded on completion of all hands-on labs and the capstone project.
Training Delivery Modes: Virtual, Onsite and Hybrid
Choose the format that fits your teams: every mode includes live instruction and guided hands-on labs.
Hybrid Training
Mix live virtual sessions with onsite lab days: learn concepts online, then practice intensively together.
- Live virtual theory plus onsite guided labs
- Same PAM tenants and exercises in every mode
- Flexible scheduling across time zones
- Instructor coaching in every session
Onsite Training
The instructor comes to your office for fully immersive, team-based privileged access training.
- Dedicated instructor at your location
- Team-based lab collaboration
- Tailored to your PAM platforms
- Minimal disruption to daily work
Live Virtual Training
Join live from anywhere: real-time instruction, shared lab environments, and direct instructor support.
- Live instructor-led online sessions
- Cloud-based PAM lab tenant access
- Real-time Q&A and coaching
- Recordings and materials included
Need a training format that works for your team?
Full days, half days across weeks, or split by module. Tell us the delivery window and we schedule the cohort around it.
Frequently Asked Questions
Share your team size, timelines, and delivery preference, and we will send a detailed per-group quote with batch options.
Yes. A short discovery call aligns the program to your privileged estate, CyberArk or Delinea footprint, and goals.
Yes. The program runs live virtually with the same guided labs, or onsite at your office, or as a hybrid mix.
Yes. Onsite delivery brings the instructor and lab coaching to your location for any group size we agree.
The program is 24 hours of instructor-led training, typically delivered across three to four days or split into modules.
Question not answered here?
Put it in the request. A training specialist answers it directly, within one business day.
Where this Training Fits in Your Team's learning path.
Privileged access management is the third step, after identity management and governance. Privileged accounts need the same lifecycle and reviews as other identities, plus extra controls, and your team can then go further with BeyondTrust where that platform is in use.
Why Choose Edstellar as Your Privileged Access Management (PAM) with CyberArk and Delinea Training Provider
Edstellar delivers privileged access training that sticks: tailored labs, practitioner instructors, and measurable skill gains for your security teams.
EXPERT TRAINERS
YEARS DELIVERING
ORGANIZATIONS TRAINED
CERTIFIED
Tailored
Scenarios, lab estates, and policy examples are shaped to your PAM platforms and privileged landscape.
Proven Methodology
A learn, practice, apply arc moves your team from PAM concepts to a reviewed deployment blueprint.
Practice-Based Learning
Guided labs in every module: vaulting, session management, secrets handling, and break-glass drills.
Expert Trainers
PAM practitioners who deploy CyberArk and Delinea in production lead every session and lab.
Global Scale
Consistent delivery across regions and time zones, in virtual, onsite, or hybrid formats.
Measurable Outcomes
Lab checkpoints and a scored capstone show exactly what each learner can now do.
Build Privileged Access Governance Around Vaulting, Session Evidence, and Recovery Procedures
Edstellar helps security and operations teams connect privileged-account risk with practical PAM controls. Participants work with CyberArk and Delinea training scenarios covering vaults, sessions, secrets, and remote access. A deployment blueprint integrates policy, phased onboarding, and break-glass testing, with feedback on scope, operational dependencies, and the evidence supporting access decisions.
- Step 01
Consult
We examine privileged account types, administration responsibilities, and existing PAM knowledge to identify gaps in vaulting, session oversight, secrets handling, or emergency access procedures.
- Step 02
Plan
We establish the privileged threat model before CyberArk vaulting and session management, then Delinea secrets and remote access, policy design, onboarding, and break-glass practice.
- Step 03
Align
We align PAM implementation expertise with IAM and infrastructure roles, confirming approved training instances and synthetic credentials for CyberArk and Delinea exercises.
- Step 04
Customize
We adapt a fictional enterprise account inventory and vendor-access scenarios to familiar administration patterns, keeping onboarding waves and emergency access tests within isolated labs.
- Step 05
Execute
Participants onboard sample accounts, review recorded lab sessions, and test time-bound access and recovery procedures, receiving feedback on policy consistency and operational evidence.
- Step 06
Evaluate
We assess the deployment blueprint for prioritized account coverage, coherent vault and session controls, practical onboarding dependencies, and clearly documented break-glass verification results.
Also from Edstellar
Talent assessments
Psychometric, behavioral, leadership and 360-degree assessment.
→Training needs analysis
Needs analysis, gap identification, and a training roadmap.
→L&D consulting
Learning strategy, content, technology and ROI measurement.
→OD consulting
Org design, succession planning and cultural change.
→Managed training services
Training outsourcing, vendor management, logistics and administration.
→Coaching solutions
Executive and manager coaching that keeps skills in use.
Start an RFP shaped to your needs.
Answer three quick questions about team size, scope, and how often you need the program run, then send the request from the last step. Everything you choose travels with it, so you only fill this in once.
How many team members need training?
Privileged Access Management (PAM) with CyberArk & Delinea Training Training Packages & Pricing
Where L&D holds an annual budget, license packages price the whole year at once instead of raising a purchase order per workshop. Hours and licenses are pooled across teams, programs and locations, so unused capacity is not stranded in one department.
Starter
120
trainee licenses64 hours of group training
Tailored for SMBs
Growth
320
trainee licenses160 hours of group training
Ideal for growing SMBs
Enterprise
800
trainee licenses400 hours of group training
Designed for large corporations
Custom
Unlimited
trainee licensesDuration set by the rollout
Multi-region and multi-year
Training Packages & Pricing
Choose the training format that works for your team. Pricing is customized based on your requirements, cohort size, and delivery needs.
Request Privileged Access Management (PAM) with CyberArk and Delinea Training for Your Team
Share your team size, PAM platforms, estate profile, and timelines to receive a tailored training plan and quote. Book a discovery call to discuss your goals; we confirm availability and respond with a proposal.