CyberArk EPM Consultant

Title: Device Management Engineer (CyberArk - EPM)

Location: 100% Remote PST time zone

Duration: 12 Months with potential to extension goal is to convert FTE

About this role:

• We are seeking a Device Management Engineer to provide support for CyberArk Endpoint Privilege Management (EPM) solutions aligned with device and application management. This role ensures a seamless employee experience that balances security requirements with automation to enhance endpoint productivity.
• You will be responsible for the ongoing configuration, management, and operational support of the CyberArk EPM solution currently in production. In addition, you will collaborate on broader CyberArk Privileged Access Security (PAS) suite components such as PVWA, CPM, PSM, RBAC, LDAP, and SAML integrations to strengthen overall enterprise security.
• This is an exciting opportunity to contribute to a secure and seamless employee experience across all devices while driving endpoint security maturity.

Responsibilities:

• Deploy, configure, and support the CyberArk Endpoint Privilege Management (EPM) solution across managed device fleet.
• Manage configurations and upgrades to EPM and PAS components (e.g., PVWA, CPM, PSM).
• Support configuration change requests for application elevation based on customer requirements, security recommendations, and RBAC policy enforcement.
• Implement LDAP and SAML integrations for secure authentication and role-based access.
• Track and report metrics related to operations and deployment, including key performance indicators (KPIs) as determined with stakeholders.
• Collaborate with security, engineering, and IT support groups to deliver secure deployments and integrate SIEM solutions for monitoring/logging.
• Conduct configuration reviews for audit purposes with endpoint security engineers, business units, and device engineers as needed.
• Leverage device management services (e.g., Microsoft Intune, JAMF) to deploy applications using security groups, deployment collections, or smart/static groups.
• Use Wolken and JIRA to track work-related tasks from start to completion.
• Work closely with Device Management engineers, providing feedback on testing results, troubleshooting, and escalations requiring additional engineering efforts or support.
• Participate in agile project methodologies to ensure delivery of team and individual project tasks.

Minimum Qualifications:

• Minimum 5 years of relevant experience in device management and/or device support.
• Minimum 2 3 years of experience with CyberArk Endpoint Privilege Management (EPM) support or engineering roles.
• Working knowledge of CyberArk PAS suite (PVWA, CPM, PSM, RBAC, LDAP, SAML).
• Familiarity with SIEM integration for log forwarding and monitoring CyberArk events.
• Working knowledge of Windows 10/11 and macOS.
• Working knowledge of Endpoint Privilege Management solutions.
• Knowledge of device management technologies (e.g., Microsoft Intune, JAMF).
• Experience working on large-scale deployment projects as a lead or high-level contributor.
• Ability to solve complex problems with creative, supportable solutions while proactively assessing and applying a risk-based approach.
• Experience managing security and compliance features, including security baselines, device compliance, limited access, and Microsoft Defender for Endpoint Protection.
• Microsoft, Mac, or security certifications.
• Bachelor s degree.
• Strong communication and time management skills, with the ability to be agile and prioritize tasks based on importance.
• Ability to work independently or collaboratively within a team and prioritize work for successful execution.