CyberArk Engineer Senior

SAIC•Washington, DC

5h•Hybrid

About The Position

SAIC is seeking a CyberArk Engineer Senior to support the Department of Transportation (DOT). The role enhances cybersecurity and identity management capabilities by coordinating with external stakeholders, including DHS CISA integrators, to implement Identity Lifecycle Management (ILM) and Mandatory User Re-Authentication (MUR) solutions. This includes integrating DOT’s SailPoint infrastructure with ServiceNow and maintaining the ILM solution across development, testing, and production environments. The position supports ILM workflows for Privileged Account Management (PAM) tools and Active Directory (AD), builds new system connections, and maintains Continuous Diagnostics and Mitigation (CDM) Dashboard integrations. It also deploys software updates, reports on SailPoint IdentityIQ operations, and supports the identification and remediation of security vulnerabilities. The engineer provides on-call and after-hours support, participates in annual Disaster Recovery testing, documents recovery plans, and offers subject matter expertise to recommend and implement improvements. The role ensures compliance with DOT change-management processes and improves reporting capabilities and CDM dashboard data integrity in accordance with DHS CISA requirements. The position requires at least eight years of related business solutions engineering support experience, including architecture and engineering design, proof-of-concept development, pilots, analysis, results, and documentation. Specific experience requirements include CyberArk implementation and design-architect experience, as well as server administration experience. A CyberArk Sentry certification must be obtained within one year of starting; SAIC will cover the exam cost. Candidates must be U.S. citizens or green card holders, have resided in the United States for at least three years, and be able to obtain a Public Trust. The position is hybrid in Washington, DC, with a day schedule and no travel. The stated target salary range is $120,001–$160,000.

Requirements

At least 8 years of related experience providing business solutions engineering support, including architectural design, engineering design, proof-of-concept development, pilots, analysis, results, and documentation.
Obtain CyberArk Sentry certification within 1 year of starting employment; SAIC will pay the exam cost.
At least 3 years of experience designing and implementing comprehensive CyberArk lifecycle management processes in an organization comparable to DOT.
At least 5 years of server administration experience, including Windows Server 2019 and Red Hat Enterprise Linux (RHEL) 8.
At least 3 years of dedicated CyberArk experience in a design architect role, including disaster recovery planning, high availability, and system administration in a large-scale enterprise environment comparable to DOT.
U.S. citizenship or green card status, at least 3 years of U.S. residency, and ability to obtain a Public Trust.
Ability to support on-call and after-hours work.

Nice To Haves

Proficiency integrating CyberArk with SailPoint.
Comprehensive Active Directory knowledge, including account management, Group Policy, AD Schema, Public Key Infrastructure (PKI), and PowerShell automation.
Foundational database management knowledge, specifically SQL Server 2019, including backups, indexing, integrity checks, installation and configuration, ports and protocols, maintenance plans, and troubleshooting.
Proficiency in data modeling and schema, including interpreting and navigating Entity Relationship Diagrams (ERDs).
Ability to configure CyberArk for secure integration with networks, iDRAC interfaces, applications, cloud services, storage solutions, servers, and appliances.

Responsibilities

Coordinate with external stakeholders, including DHS CISA integrators, to implement DOT’s ILM/MUR solutions.
Integrate DOT’s SailPoint infrastructure with the ServiceNow environment.
Maintain the ILM solution across development, testing, and production environments.
Support ILM workflows for PAM tools and Active Directory.
Build new system connections and maintain CDM Dashboard integrations.
Deploy software updates and report on SailPoint IdentityIQ operations.
Support the identification and remediation of security vulnerabilities.
Provide on-call and after-hours support.
Participate in annual Disaster Recovery testing and document recovery plans.
Provide subject matter expertise and recommend and implement improvements.
Follow DOT change-management processes.
Enhance reporting capabilities and ensure CDM dashboard data integrity in compliance with DHS CISA requirements.
Assist in identifying technology solutions that meet enterprise requirements; map functional requirements to technological requirements and identify suitable technologies.
Conduct proof-of-concept work, pilots, and demonstrations to evaluate technologies against requirements.
Evaluate tradeoffs between competing solutions and develop quantitative analysis of alternatives.
Produce written research and recommendation papers describing the process, alternatives, evaluation criteria, rationale, and need for additional work.