Senior CyberArk Security Engineer

The Opportunity:
As the Senior CyberArk Engineer/SME/Scripter, you will oversee the implementation, coordination, migration, and onboarding of all aspects and phases of CyberArk's Privileged Access Management (PAM) solution rollout, both on-premises and in the privilege cloud, along with CyberArk operational tasks. Joining our client's broader Infrastructure Operations & Security organization, you will play a key role in a versatile information security team, leveraging fundamental systems security understanding, skills, and experience to maintain and operate complex information systems and security tools that align with organizational missions and partner protection needs. You will report directly to the Vice President of Infrastructure Security.
The Day-to-Day:

• Onboard and provision users, manage service accounts and password rotations, and oversee credentials, including interactive, non-interactive, and API-based access.


• Guide privileged access management programs to enhance our broader security posture, as demonstrated by measurable metrics.


• Lead the configuration, administration, and maintenance of CyberArk solutions, encompassing both infrastructure and application components.


• Oversee the development of relevant documentation and training materials for privileged access management solutions and processes, including defining policies and control standards.


• Report progress and system health through risk-driven and operationally focused metrics and Key Performance Indicators (KPIs).


• Address the ticket queue and adhere to appropriate change management procedures.


• Assess risks and provide recommendations for enhancing system security and processes.


• Stay informed about current security technologies, industry trends, and threats, and contribute subject matter expertise on Identity and Access Management (IAM) and Privileged Access Management (PAM) technologies.

Your Qualifications:

• 5+ years of experience leading enterprise-wide privileged access management technology adoption across medium- to large-scale companies.


• Extensive hands-on experience (5+ years) with CyberArk, including CyberArk Cloud Platform, Enterprise Password Vault (EPV), Lifecycle Management (LCM), and CyberArk SaaS Cloud Base.


• 3+ years of experience as a systems engineer in medium- to large-scale Financial Services companies.


• 1+ years of hands-on experience with SailPoint.


• Experience with Thycotic Secret Server, Privilege Manager, and Connection Server.


• Strong knowledge of IAM & PAM ecosystem, including technology, standards, implementations, migration, and operations.


• In-depth experience with CyberArk solutions, such as Core Privileged Access Security, Endpoint Privilege Manager, Application Access Manager, Privileged Session Manager, Privileged Threat Analytics, Central Password Manager, and Connectors.


• Expertise in installing, upgrading, configuring, operating, and troubleshooting CyberArk components.


• Proficiency in DNA, Discovery scan, and account onboarding automation processes.


• Familiarity with various application integrations with CyberArk through custom plugins.


• Integration experience with SailPoint, databases, SCIM, AWS, Google Cloud Platform (Google Cloud Platform), Microsoft Azure, or Palo Alto Networks.


• Scripting knowledge in PACLI, PowerShell, Python, JavaScript, AutoIt, and REST API.


• Bachelor's degree in Information Assurance, Computer Science, Cybersecurity, Information Systems, or related field.


• Security industry certifications, including CISSP, SSCP, CISM, SANS GSEC, ECSA, ECSP, and Security+.


• CyberArk certifications (Defender and Sentry).

Why Our Client:
Our client is committed to a bigger purpose: enhancing the cybersecurity landscape. We take immense pride in our inclusive culture, tailored learning and development opportunities for each team member, and our recognition as a Great Place to Work. At our client, it's our dedicated team that drives our mission forward.