CyberArk Engineer

(Mid Systems Engineer, CyberArk)

Location: Remote

Responsibilities

• Assist with deployment, configuration, and maintenance of the CyberArk PAM platform across development, testing, and production.
• Manage and support roles, safes, and access policies within CyberArk.
• Coordinate software updates, pilots, proofs of concept, and demos to validate technology solutions.
• Develop analysis of alternatives and quantitatively evaluate competing solutions.
• Prepare reports on PAM performance, security posture, and compliance with DHS CISA requirements.
• Identify and help remediate security vulnerabilities related to privileged access.
• Provide on-call support for troubleshooting and incident remediation tied to PAM operations.
• Support annual disaster recovery testing and documentation of recovery and contingency plans.
• Assist with operating system patching and maintenance on vault appliances.
• Produce clear technical documentation, research summaries, and recommendations aligned to enterprise requirements and change management processes.

Experience Requirements

• Minimum 5 years providing business solutions engineering support including architecture, engineering design, proof of concept development, pilots, analysis, and documentation.
• Demonstrated experience mapping functional requirements to technical solutions and identifying suitable technologies.
• Proficiency conducting proofs of concept, pilots, and demos to assess solution fit.
• Ability to evaluate tradeoffs among competing solutions with quantitative analysis.
• Experience producing clear research analyses and recommendation papers.
• Current CyberArk Sentry certification with hands-on CyberArk administration.
• At least 1 year implementing CyberArk lifecycle management processes in a complex environment comparable to a large federal agency.
• 3 years of server administration with Windows Server 2019 and Red Hat Enterprise Linux 8.
• Experience integrating CyberArk with SailPoint (preferred).
• Extensive Active Directory experience including account management, Group Policy, AD Schema, PKI, and PowerShell automation (preferred).
• SQL Server 2019 administration including backups, indexing, integrity checks, installation, configuration, ports and protocols, maintenance plans, troubleshooting, data modeling, and ERD interpretation (preferred).
• Ability to configure CyberArk for secure integration with networks, iDRAC, applications, cloud services, storage, servers, and appliances (preferred).

Education Requirements

• CyberArk Sentry certification.