Position: Senior CyberArk Endpoint Privilege Manager (EPM) Engineer / Consultant
Experience: 8+ years in cybersecurity/IAM/PAM, including 4+ years of hands-on CyberArk EPM experience
Location: Remote
Role Overview
We are seeking a highly experienced Senior CyberArk Endpoint Privilege Manager (EPM) Engineer / Consultant to lead the design, implementation, optimization, and operational support of CyberArk EPM solutions in complex enterprise environments.
The ideal candidate will possess deep technical expertise in endpoint privilege management, least privilege enforcement, application control, and enterprise-scale EPM deployments. This individual will serve as a technical subject matter expert, independently resolve complex issues, and provide architectural guidance and best practices to clients.
Key Responsibilities
- Lead the design, deployment, configuration, and optimization of CyberArk EPM across enterprise environments.
- Architect and implement least privilege strategies to eliminate unnecessary local administrator access.
- Design and maintain advanced privilege elevation, application control, and exception management policies.
- Lead large-scale CyberArk EPM agent deployments, upgrades, and migrations across Windows and macOS endpoints.
- Troubleshoot complex application elevation failures, policy conflicts, agent connectivity, and application compatibility issues.
- Assess existing EPM implementations and recommend improvements to security posture, performance, and operational efficiency.
- Integrate CyberArk EPM with Microsoft Intune, SCCM/MECM, Active Directory, Microsoft Entra ID, and enterprise endpoint management platforms.
- Develop automation scripts using PowerShell to streamline EPM administration, reporting, and troubleshooting.
- Establish EPM monitoring, reporting, policy governance, and operational processes.
- Lead technical discussions, solution design workshops, and troubleshooting sessions with client stakeholders.
- Provide technical leadership, mentoring, and guidance to junior engineers and support teams.
- Develop solution architecture documents, technical runbooks, standard operating procedures, and knowledge transfer materials.
- Collaborate with endpoint engineering, infrastructure, application owners, and security operations teams to resolve complex privilege management challenges.
- Support production incidents, root cause analysis, and continuous improvement initiatives.
Required Qualifications
- 8+ years of experience in cybersecurity, IAM, PAM, endpoint security, or related disciplines.
- Minimum 4 years of hands-on experience implementing, engineering, and supporting CyberArk EPM.
- Demonstrated experience leading enterprise-scale CyberArk EPM implementations and optimization initiatives.
- Advanced expertise in EPM policy design, application elevation, application control, and least privilege enforcement.
- Strong understanding of Windows operating systems, UAC, local administrator privileges, application execution, and endpoint security controls.
- Experience troubleshooting complex EPM agent, policy, and application compatibility issues.
- Experience with enterprise endpoint management technologies, including Microsoft Intune, SCCM/MECM, Active Directory, and Microsoft Entra ID.
- Strong PowerShell scripting and automation capabilities.
- Experience developing technical architecture, implementation documentation, and operational procedures.
- Excellent analytical, troubleshooting, stakeholder management, and client-facing communication skills.
- Ability to independently lead technical workstreams and deliver solutions with minimal supervision.
Preferred Qualifications
- CyberArk EPM certification or other relevant CyberArk certifications.
- Experience with CyberArk PAM, Privilege Cloud, and broader privileged access management solutions.
- Experience supporting EPM deployments across 5,000+ enterprise endpoints.
- Experience integrating CyberArk EPM with ServiceNow and enterprise ITSM workflows.
- Knowledge of endpoint security frameworks, CIS benchmarks, and Zero Trust principles.
- Experience designing EPM governance, exception management, and application allowlisting strategies.
- Familiarity with EPM reporting, API integrations, and automated operational workflows.
- Previous experience delivering cybersecurity consulting or managed security services for enterprise clients.
Expected Deliverables
- CyberArk EPM architecture and implementation documentation.
- Enterprise-wide least privilege and application elevation policy framework.
- EPM deployment, upgrade, and optimization plans.
- Agent health, policy effectiveness, and endpoint compliance reporting.
- Technical troubleshooting guides, operational runbooks, and standard operating procedures.
- EPM governance, exception management, and operational support processes.
- Knowledge transfer sessions and technical guidance for client teams.
Ideal Candidate
A senior-level, hands-on CyberArk EPM subject matter expert with demonstrated experience leading enterprise implementations, designing advanced privilege management policies, troubleshooting complex endpoint security issues, and independently delivering technical solutions in client-facing consulting environments.
The candidate should combine strong technical execution with architectural thinking, stakeholder communication, and the ability to mentor other engineers while driving enterprise endpoint privilege management maturity.
About Aspire Systems
Aspire Systems is a $180+ million global technology services firm with over 4,900 employees worldwide, partnering with 275+ active customers. Founded in 1996, Aspire has grown steadily at a 19% CAGR since 2020.
Headquartered in Singapore, we operate across the US, UK, LATAM, Europe, the Middle East, India, and Asia Pacific regions, with strong nearshore delivery centers in Poland and Mexico. Aspire has been consistently recognised among India’s 100 Best Companies to Work For for 12 consecutive years by the Great Place to Work Institute.
Who We Are
Aspire is built on deep expertise in Software Engineering, Digital Services, Testing, and Infrastructure & Application Support. We serve diverse industries including Independent Software Vendors, Retail, Banking & Financial Services, and Insurance.
Our proven frameworks and accelerators enable us to create future-ready, scalable, and business-focused systems, helping customers across the globe embrace digital transformation at speed and scale.
Why Join Aspire Systems
Being an Aspirian means being part of a future-ready, global workplace where you will work on emerging technologies, collaborate with diverse teams, and contribute to meaningful digital transformation initiatives.
We foster innovation, value diverse perspectives, and enable continuous learning and career growth — guided by our philosophy of “Attention. Always.” Aspire also follows a hybrid work model, promoting flexibility, collaboration, and work-life balance.
Learn more about Life at Aspire:
Our Commitment to Diversity & Inclusion
At Aspire Systems, we foster a work culture that appreciates diversity and inclusiveness. We understand that our multigenerational workforce represents different regions, cultures, economic backgrounds, races, genders, ethnicities, education levels, personalities, and religions. We believe these differences make us stronger and are committed to building an inclusive workplace where everyone feels respected and valued.
Privacy Notice
Aspire Systems values your privacy. Candidate information collected through this recruitment process will be used solely for hiring purposes, handled securely, and retained only as long as necessary in compliance with applicable privacy laws.
Disclaimer
The above statements are not intended to be a complete statement of job content, but rather to serve as a guide to the essential functions performed by the employee in this role. Management retains the discretion to add or change the duties of the position at any time
