Job Title: CyberArk Engineer

Location: Hybrid - Washington, D.C.

Clearance Level: Public Trust

Required Certification(s): 

• Must have the CyberArk Defender certification as we need them to be able to directly interact with the CyberArk vendor, as well as perform upgrades independent of CyberArk Professional Services.

SUMMARY:
Seeking a talented CyberArk Engineer for an exciting position supporting one of our federal clients. Our project is aimed at establishing cutting-edge techniques for network defense, identifying threats and detecting malicious activity using advanced toolsets.  The candidate should have an in-depth understanding of CyberArk and be able to perform the installation, configuration, tuning, and administration of CyberArk.  This effort will require a technically, skilled engineer with experience performing analysis of network security solutions, including identifying gaps, recommending and implementing configuration changes related to CyberArk.

As a Privilege Access Management (PAM) Engineer, they will apply Cybersecurity experience in leading an Identity and Access Management (IAM) to analyze, design, and support a continuous monitoring solution to verify and validate appropriate user privileges, assigned credentials, trustworthiness, appropriate user security behavior training, and appropriately granted resource access rights to users.

JOB DUTIES AND RESPONSIBILITIES

• Engage multiple stakeholders and leverage related security products or technologies to recommend solution architectures and designs needed to monitor and report on IAM related data across multiple government agencies.
• Integrate disparate IAM data from multiple sources into a singular database for correlation and presentation.
• Maintain responsibility for articulating and authoring multiple findings, recommendations, and other artifacts, including interfacing with key stakeholders to implement tailored IAM solutions.
• They will work with architects, SMEs and other engineers.

SUPERVISORY DUTIES

• Provide work leadership to junior employees, as needed.

QUALIFICATIONS
Required Certifications

• Must have the CyberArk Defender certification as we need them to be able to directly interact with the CyberArk vendor, as well as perform upgrades independent of CyberArk Professional Services.

Education, Background, and Years of Experience

• Minimum of 10 years of overall IT experience
• 5 years of CyberArk experience
• 2+ years of experience in supporting IAM, security operations and threat response, or security architecture
• 2+ years of experience with requirements, design, implementation, integration, testing, or change management

ADDITIONAL SKILLS & QUALIFICATIONS
Required Skills

• Supporting access management solutions with CyberArk, including user privileges management, user credential management, and user security related behavior monitoring

Preferred Skills

• Experience with SailPoint, Saviynt
• Experience with supporting IAM in a Cloud environment, including Azure or AWS
• Experience with SQL database administration or management
• Experience with an SIEM tool, preferably Splunk or the ELK stack
• Experience with authoring Cybersecurity guidance, including policies, strategies, and whitepapers
• Experience with implementing PKI and PIV standards

WORKING CONDITIONS
Environmental Conditions

• Contractor onsite requirements: Work From Home authorized

Strength Demands

• Light – 20 lbs. Maximum lifting with frequent lift/carry up to 10 lbs. A job is light if less lifting is involved but significant walking/standing is done or if done mostly sitting but requires push/pull on arm or leg controls.

Physical Requirements

• Stand or Sit; Walk; Repetitive Motion; Use Hands / Fingers to Handle or Feel; Stoop, Kneel, Crouch, or Crawl; See; Push or Pull; Climb (stairs, ladders) or Balance (ascend / descend, work atop, traverse).