Sr Security Engineer with CyberArk (12+ Years) at Sandy Springs, GA

Job Description:
We are seeking a skilled Security Engineer to support a strategic initiative aimed at reducing privilegedaccess risk. This role combines technical remediation and business analysis, leveraging CyberArk, Windows/Active Directory, and privilegedaccess governance to execute endtoend removal of local administrator accounts. The Security Engineer will lead account discovery, remediation, and stakeholder coordination to enhance security posture and ensure compliance readiness. The ideal candidate will eliminate local admin accounts, onboard functional and JIT accounts into CyberArk, document ownership and dependencies, and deliver executivelevel reporting that demonstrates measurable risk reduction.

Minimum Requirements (Musthaves)

• Handson experience with CyberArk Privileged Access Security (onboarding, vaulting, JIT/ZOA policy configuration).
• Strong knowledge of Windows Server administration, Active Directory, and local admin privilege management.
• Demonstrated ability to perform business analysis, including gathering requirements, validating account dependencies, and documenting access justification.
• Excellent troubleshooting skills with strong communication and documentation abilities.
• Familiarity with compliance frameworks such as SOX and audit readiness requirements.
• 10+ years of experience working in Active Directory Management, AD Replication, GPO, trusts, DNS and DHCP
• 10+ years in writing advanced, efficient, and well-structured PowerShell , Python or shell scripts
• 6+ years working with CyberArk products
• 6+ years working and driving large scale security initiatives in an enterprise environment

Other Requirements (Shouldhaves)

• CyberArk certification (Defender, Sentry, or Guardian).
• Microsoft/Cloud certifications
• M365 administration
• Experience supporting large-scale IAM/PAM remediation initiatives.
• Background in security operations, Infrastructure security, or security architecture.
• Strong knowledge of networking fundamentals (TCP/IP, DNS, VPN, firewalls) and operating system