CyberArk Engineer - Senior

SAIC•Washington, DC

3d•Onsite

About The Position

SAIC accepts applications on an ongoing basis and there is no deadline. SAIC® is a premier Fortune 500® mission integrator focused on advancing the power of technology and innovation to serve and protect our world. Our robust portfolio of offerings across the defense, space, civilian and intelligence markets includes secure high-end solutions in mission IT, enterprise IT, engineering services and professional services. We integrate emerging technology, rapidly and securely, into mission critical operations that modernize and enable critical national imperatives. We are approximately 24,000 strong; driven by mission, united by purpose, and inspired by opportunities. SAIC is an Equal Opportunity Employer. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $7.5 billion. For more information, visit saic.com . For ongoing news, please visit our newsroom . As a CyberArk Senior Systems Engineer, you'll play a key role in enhancing our cybersecurity and identity management capabilities. You'll coordinate with external stakeholders, including DHS CISA integrators, to implement the Identity Lifecycle Management (ILM)/Mandatory User Re-Authentication (MUR) solutions at the Department of Transportation (DOT). This involves integrating DOT's SailPoint infrastructure with the ServiceNow environment and maintaining the ILM solution across development, testing, and production environments. Your responsibilities will also include: Supporting ILM workflows for Privileged Account Management (PAM) tools and Active Directory (AD), building new system connections, and maintaining Continuous Diagnostics and Mitigation (CDM) Dashboard integrations. You'll be responsible for deploying software updates, reporting on SailPoint IdentityIQ operations, and supporting the identification and remediation of security vulnerabilities. This position requires providing on-call and after-hours support, participating in annual Disaster Recovery testing, documenting recovery plans, and offering subject matter expertise to recommend and implement improvements. You'll ensure compliance with DOT processes for change management and enhance reporting capabilities, ensuring data integrity for CDM dashboard compliance per DHS CISA requirements. Join us to support critical cybersecurity initiatives and contribute to a secure, efficient IT infrastructure at the DOT Headquarters in Washington, DC

Requirements

Must have a minimum of 8 years of related experience providing business solutions engineering support, to include architectural design, engineering design, proof of concept development, pilots, analysis, results, and documentation.
Performs day-to-day activities required to assist and identify technology solutions that meet enterprise requirements.
Maps functional requirements into technological requirements, and identifies technologies that meet the technological requirements.
Conducts proof of concept, pilots and demos for the purposes of evaluating the suitability of given technologies for meeting requirements.
Evaluates the tradeoffs between competing solutions and develops quantitative driven analysis of alternatives.
Produces written analysis of research and recommendation papers that clearly describe the process followed, alternatives considered, evaluation criteria and rationale for recommendation and need for additional work.
CyberArk Sentry Certification\: Certified CyberArk Sentry qualification to be obtained within 1 year of start of employment, demonstrating advanced knowledge and skills in managing the CyberArk Privileged Access Security Solution. SAIC will carry the cost of the exam to be certified.
Proven CyberArk Implementation Expertise\: Three years of experience in designing and implementing comprehensive lifecycle management processes for CyberArk within an organization comparable to the Department of Transportation (DOT), showcasing a deep understanding of privileged access management solutions.
Extensive Server Administration Experience\: Five years of server administration experience, including proficiency with Windows Server 2019 and Red Hat Enterprise Linux (RHEL) 8, indicating a strong foundation in managing and maintaining critical server infrastructure.
CyberArk Design Architect Proficiency\: Three years of dedicated CyberArk experience in a design architect role, encompassing disaster recovery planning, ensuring high availability, and conducting system administration within a large-scale enterprise environment similar to DOT, highlighting the ability to architect robust and resilient CyberArk deployments.
Candidate must be a U.S. citizen or green card holder who has resided in the U.S. for at least 3 years and the ability to obtain a public trust

Nice To Haves

CyberArk and SailPoint Integration Acumen\: Demonstrated proficiency in integrating CyberArk with SailPoint, showcasing the capability to harmonize privileged access management with identity governance solutions for enhanced security protocols.
Advanced Active Directory Expertise\: Comprehensive knowledge of both the user interface aspects of Active Directory, such as account management and Group Policy, and the technical components, including AD Schema, Public Key Infrastructure (PKI), and automation via PowerShell, ensuring a well-rounded approach to directory services management.
Database Management Skills\: Solid foundational understanding of database management, specifically with SQL Server 2019. This includes experience with backups, indexing, integrity checks, installation and configuration, managing ports and protocols, developing maintenance plans, and adept troubleshooting. Additionally, proficient in data modeling and schema, with the ability to interpret and navigate Entity Relationship Diagrams (ERDs), indicating a comprehensive grasp of database architecture and operations.
CyberArk Configuration Knowledge\: Proven ability to configure CyberArk for secure integration with a variety of systems and devices, including networks, iDRAC interfaces, applications, cloud services, storage solutions, servers, and appliances, ensuring a secure and efficient privileged access ecosystem across the IT landscape.

Responsibilities

Supporting ILM workflows for Privileged Account Management (PAM) tools and Active Directory (AD)
Building new system connections
Maintaining Continuous Diagnostics and Mitigation (CDM) Dashboard integrations
Deploying software updates
Reporting on SailPoint IdentityIQ operations
Supporting the identification and remediation of security vulnerabilities
Providing on-call and after-hours support
Participating in annual Disaster Recovery testing
Documenting recovery plans
Offering subject matter expertise to recommend and implement improvements
Ensuring compliance with DOT processes for change management
Enhancing reporting capabilities, ensuring data integrity for CDM dashboard compliance per DHS CISA requirements