Senior CyberArk Engineer

Description:
Remote

Our client seeks a Senior CyberArk Engineer to support the Department of Transportation's privileged access management program. The role will contribute to deployment, maintenance, and reporting of CyberArk across development, test, and production. The engineer will collaborate with stakeholders and integrators to strengthen security, address vulnerabilities, and support change management. The position will also aid disaster recovery testing and vault appliance patching to ensure compliance and resiliency.

Due to federal security clearance requirements, applicant must be a United States Citizen or Permanent Resident.Due to federal security clearance requirements, applicant must be a United States Citizen or Permanent Resident with an active Public Trust clearance.This is a contract to hire opportunity. Applicants must be willing and able to work on a w2 basis and convert to FTE following contract duration. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.

Rate: $71.00 to $81.00/hr. w2

Responsibilities:

• Assist with deployment, configuration, and maintenance of CyberArk across development, test, and production.
• Manage and support roles, safes, policies, and platform onboarding within CyberArk.
• Support software updates, patching, and lifecycle management for CyberArk components and vault appliances.
• Collaborate with stakeholders and integrators to ensure PAM performance, availability, and compliance with requirements.
• Identify, document, and remediate security vulnerabilities related to PAM.
• Provide on-call troubleshooting and incident remediation for PAM-related issues.
• Prepare and enhance performance, security, and compliance reporting aligned to DHS CISA requirements.
• Support annual disaster recovery testing and document recovery and contingency plans.
• Follow change management processes and contribute to analysis of alternatives, pilots, and proofs of concept.

Experience Requirements:

• Minimum 8 years of experience delivering business solutions engineering support including architecture, engineering design, proof of concept, pilots, analysis, results, and documentation.
• Hands-on experience mapping functional requirements to technical requirements and evaluating technology alternatives with quantitative analysis.
• Experience producing written research, evaluation criteria, and recommendations.
• Current CyberArk Sentry certification with demonstrated expertise managing privileged accounts.
• At least 1 year implementing CyberArk lifecycle processes at enterprise scale comparable to DOT.
• Minimum 3 years of server administration on Windows Server 2019 and Red Hat Enterprise Linux 8.
• Proficiency integrating CyberArk with SailPoint (preferred).
• Extensive Active Directory experience including account management, Group Policy, AD Schema, PKI, and PowerShell automation (preferred).
• Database management knowledge with SQL Server 2019 including backups, indexing, integrity checks, installation, configuration, maintenance plans, ports and protocols, troubleshooting, and data modeling with ERDs (preferred).

Education Requirements:

• CyberArk Sentry certification.
• DOT Public Trust eligibility as specified by program requirements.