CyberArk Engineer

Who we are:

ShorePoint is a fast-growing, industry recognized and award-winning cybersecurity services firm with a focus on high-profile, high-threat, private and public-sector customers who demand experience and proven security models to protect their data. ShorePoint subscribes to a "work hard, play hard" mentality and celebrates individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers. We are equally passionate about an environment that supports creativity, accountability, diversity, inclusion and a focus on giving back to our community.

The Perks:

As recognized members of the Cyber Elite, we work together in partnership to defend our nation's critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individuals technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, including major carriers for health care providers. Highlighted benefits offered: 18 days of PTO, 11 holidays, 80% of insurance premium covered, 401k, continued education, certifications maintenance and reimbursement and more.

Who we're looking for:

We are seeking a CyberArk Engineer with experience implementing and supporting Identity and Access Management (IAM) solutions in secure enterprise environments. The ideal candidate will have hands-on expertise with CyberArk, a strong understanding of Linux-based systems and familiarity with privileged access controls and directory services. The CyberArk Engineer role supports secure credential management, compliance initiatives and operational cybersecurity goals in fast-paced environments requiring cross-functional collaboration. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market.

What you'll be doing:

• Configure, operate and maintain CyberArk components including Privileged Vault Web Access (PVWA), Central Policy Manager (CPM), Privileged Session Manager (PSM) and Vault in enterprise environments.
• Manage privileged access policies and controls to enforce least privilege and session monitoring.
• Implement secure credential and password vaulting strategies across multiple systems and applications.
• Support integration of CyberArk with Active Directory (AD), Lightweight Directory Access Protocol (LDAP), Single Sign-On (SSO) and multi-factor authentication (MFA) solutions.
• Troubleshoot and remediate access control issues across Linux and Windows environments.
• Monitor user privilege activities and support incident response investigations involving elevated access.
• Collaborate with IT, security operations and system owners to identify and secure privileged accounts.
• Assist in implementing IAM best practices aligned with federal or organizational cybersecurity policies.
• Develop or maintain scripts to support automation and reporting functions related to IAM workflows.
• Contribute to technical documentation including configuration procedures, standard operating procedures (SOPs) and security baseline.

What you need to know:

• CyberArk core components and use cases, including privileged account management, session monitoring and credential rotation.
• IAM principles and secure integration with directory services such as AD and LDAP.
• Linux system administration, privilege configuration and troubleshooting.
• IAM integrations with Public Key Infrastructure (PKI), Personal Identity Verification (PIV) cards or Common Access Cards (CAC) and MFA solutions.
• Basic scripting in PowerShell, Bash or Python to support access automation and security monitoring.
• Core protocols and data formats such as HTTP, XML, REST and JSON.

Must have's:

• High school diploma or GED.
• 5+ years of experience in Information Technology (IT), including supporting access management solutions or user credential security.
• 3+ years of hands-on experience in cybersecurity engineering or security operations, including work with firewalls, vulnerability scanners or penetration testing tools.
• 2+ years of experience supporting IAM, security operations and threat response or security architecture.
• 2+ years of hands-on experience with IAM tool CyberArk.
• 2+ years of experience in Linux-based environments.
• Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
• Knowledge of Active Directory or LDAP management, PKI, X.509, SSO across multiple domains, 2FA with PIV or CAC and scripting/coding.
• Must be a U.S. citizen in compliance with federal contract requirements.

Beneficial to have:

• Bachelor's degree in an IT-related field.
• 2+ years of experience implementing IAM tools in enterprise environments.
• 2+ years of experience collaborating directly with clients or stakeholders.
• Experience supporting IAM in cloud environments (e.g., AWS or Azure).
• Experience with SQL database administration or management.
• Experience with SIEM platforms such as Splunk or ELK stack.
• Familiarity with interpreting and implementing cybersecurity policies, strategies and guidance.
• Experience with PKI and PIV standards implementation.
• Knowledge of HTTP, XML, REST and JSON.

Where it's done:

• Remote (Herndon, VA).