CyberArk Senior Engineer

Position: CyberArk Senior Engineer

Location: Remote

Hiring Mode: 3+ Months Contract

Job Description:

We're seeking a highly skilled and motivated CyberArk Senior Engineer to join our team. The ideal candidate possesses deep technical expertise in the CyberArk, with a specific focus on implementing and managing Endpoint Privilege Manager (EPM). This role is not just about execution; it requires a strong understanding of security architecture principles to design, evolve, and govern the PAM environment.

Key Responsibilities

CyberArk EPM Implementation & Management:

• Co-Lead the planning, installation, configuration, and ongoing maintenance of the CyberArk EPM solution across the enterprise endpoint landscape (Windows, macOS).
• Develop and manage EPM policies, application control rules, and trusted application definitions to enforce least privilege principles and block malicious activity.
• Collaborate with endpoint, infrastructure, and application teams to onboard endpoints and integrate EPM with existing management tools.

Architecture & Design:

• Serve as a trusted Cyberark resource on EPM, and process improvements around EPM.
• Translate high-level business and security requirements into robust, scalable, and secure technical designs and deployment strategies for EPM.
• Provide architectural guidance for the integration of CyberArk components with Identity Providers (IdP), Security Information and Event Management (SIEM), and other critical security infrastructure.

Engineering & Operations:

• Develop and implement automation (e.g., PowerShell, REST APIs) for EPM deployment, policy lifecycle management, and reporting.
• Perform performance tuning, monitoring, and troubleshooting of the CyberArk environment, ensuring high availability and resilience.
• Create and maintain comprehensive documentation, including design documents, runbooks, and operational procedures.

Consultation & Governance:

• Act as a security consultant to business units, explaining the architectural "why" behind EPM policy decisions and providing strategic guidance on privilege removal.
• Conduct regular security reviews and audits of the CyberArk platform to ensure compliance with internal standards and external regulations.

Required Qualifications

• Experience: 5+ years of experience in Information Security, with at least 3+ years dedicated to implementing and engineering CyberArk EPM solutions in a large, complex environment.
• CyberArk Expertise: Mandatory deep hands-on experience with CyberArk Endpoint Privilege Manager (EPM), including policy creation, agent deployment, removing local admin rights, and application control.
• Architecture Knowledge: Proven ability to understand the architectural philosophy of a PAM solution including least privilege, zero trust, shared technology platforms, and segmentation and translate this into practical engineering deliverables.

Technical Skills:

• Expertise in Windows and macOS operating systems, including user privilege models, security hardening, and troubleshooting endpoint-related issues.
• Strong scripting skills (e.g., PowerShell, Python) for automation and integration.
• Solid understanding of Active Directory, LDAP, Kerberos, and other core identity services.
• Communication: Excellent verbal and written communication skills with the ability to articulate complex technical concepts and architectural decisions to technical and non-technical stakeholders.

Preferred Qualifications

• Certifications: CyberArk Certified Defender (CCD), CyberArk Certified Sentry (CCS), or CyberArk Certified Guardian (CCG).
• Cloud Experience: Experience implementing EPM or other PAM solutions in a hybrid or multi-cloud environment (AWS, Azure, Google Cloud Platform).
• Related Technologies: Familiarity with other privileged identity management tools or security concepts like Just-in-Time (JIT) PAM, Secrets Management, and DevOps security practices.