CyberArk Engineer Senior

SAIC•Washington, DC

About The Position

SAIC is seeking a CyberArk Engineer Senior to support the Department of Transportation (DOT). The role enhances cybersecurity and identity management capabilities by coordinating with external stakeholders, including DHS CISA integrators, to implement Identity Lifecycle Management (ILM) and Mandatory User Re-Authentication (MUR) solutions. This includes integrating DOT's SailPoint infrastructure with ServiceNow and maintaining the ILM solution across development, testing, and production environments. The position supports ILM workflows for Privileged Account Management (PAM) tools and Active Directory, builds system connections, and maintains Continuous Diagnostics and Mitigation (CDM) Dashboard integrations. It also deploys software updates, reports on SailPoint IdentityIQ operations, and supports identification and remediation of security vulnerabilities. The engineer provides on-call and after-hours support, participates in annual Disaster Recovery testing, documents recovery plans, and recommends and implements improvements as a subject matter expert. The role ensures compliance with DOT change-management processes and enhances reporting and data integrity for CDM dashboard compliance with DHS CISA requirements. The successful candidate brings substantial business-solutions engineering experience, including architecture and engineering design, proof-of-concept development, pilots, analysis, and documentation. Role-specific experience includes CyberArk lifecycle management implementation, server administration, and CyberArk design architecture in an enterprise environment. A CyberArk Sentry certification must be obtained within one year of employment; SAIC will cover the exam cost. Candidates must be U.S. citizens or green card holders, have resided in the United States for at least three years, and be able to obtain a public trust.

Requirements

At least 8 years of related experience providing business solutions engineering support, including architectural design, engineering design, proof-of-concept development, pilots, analysis, results, and documentation.
Three years of experience designing and implementing comprehensive CyberArk lifecycle management processes in an organization comparable to DOT.
Five years of server administration experience, including proficiency with Windows Server 2019 and Red Hat Enterprise Linux (RHEL) 8.
Three years of dedicated CyberArk experience in a design architect role, including disaster recovery planning, high availability, and system administration in a large-scale enterprise environment.
Obtain CyberArk Sentry certification within one year of starting employment; SAIC will cover the exam cost.
Must be a U.S. citizen or green card holder who has resided in the United States for at least three years.
Must be able to obtain a public trust.

Nice To Haves

Demonstrated proficiency integrating CyberArk with SailPoint.
Comprehensive Active Directory knowledge, including account management, Group Policy, AD Schema, Public Key Infrastructure (PKI), and PowerShell automation.
Foundational database management knowledge with SQL Server 2019, including backups, indexing, integrity checks, installation and configuration, ports and protocols, maintenance plans, troubleshooting, data modeling, schema, and interpreting Entity Relationship Diagrams (ERDs).
Ability to configure CyberArk for secure integration with networks, iDRAC interfaces, applications, cloud services, storage solutions, servers, and appliances.

Responsibilities

Coordinate with external stakeholders, including DHS CISA integrators, to implement DOT ILM and MUR solutions.
Integrate DOT's SailPoint infrastructure with the ServiceNow environment and maintain the ILM solution across development, testing, and production environments.
Support ILM workflows for PAM tools and Active Directory.
Build new system connections and maintain CDM Dashboard integrations.
Deploy software updates and report on SailPoint IdentityIQ operations.
Support the identification and remediation of security vulnerabilities.
Provide on-call and after-hours support.
Participate in annual Disaster Recovery testing and document recovery plans.
Provide subject matter expertise and recommend and implement improvements.
Ensure compliance with DOT change-management processes.
Enhance reporting capabilities and ensure data integrity for CDM dashboard compliance with DHS CISA requirements.
Assist in identifying technology solutions that meet enterprise requirements, map functional requirements to technology requirements, and identify appropriate technologies.
Conduct proof-of-concept work, pilots, and demonstrations to evaluate technologies against requirements.
Evaluate tradeoffs between competing solutions and develop quantitative analysis of alternatives.
Produce written research and recommendation papers describing the process, alternatives, evaluation criteria, rationale, and need for additional work.