Mid-Level CyberArk Engineer

SAIC•Washington, DC

6d•Onsite

About The Position

Step into the role of a Mid-Level CyberArk Engineer, where you will play a crucial supporting role in enhancing the Department of Transportation's (DOT) cybersecurity infrastructure. Working alongside senior engineers, you'll contribute to the deployment and ongoing maintenance of a sophisticated Privileged Access Management (PAM) solution. This role will see you engaging with key stakeholders, including DHS CISA integrators, to ensure the PAM system operates flawlessly across development, testing, and production environments. Your daily responsibilities will involve assisting with the management of roles and safes, helping deploy software updates, and contributing to the preparation of reports that highlight the performance and security of the PAM tool. Additionally, you'll be involved in identifying and mitigating security vulnerabilities, providing essential support for on-call troubleshooting and remediation efforts related to the PAM solution. You'll also support annual disaster recovery testing, aid in documenting recovery and contingency plans, and assist with operating system patching on vault appliances. Your role is critical in ensuring that the PAM solution not only meets but exceeds security requirements, following DOT’s Change Management processes and contributing to the enhancement of reporting capabilities in line with DHS CISA requirements. Joining our team means becoming a key player in securing critical infrastructure, offering a unique opportunity to grow your expertise in cybersecurity and privileged access management within a supportive and collaborative environment.

Requirements

Good background of Systems (Windows/Linux) and networking in IT and DevOps experience will be helpful in addition to IAM/PAM
CyberArk products support experience including troubleshooting (analyzing debug logs) password management/CPM, PSM/PSMP secure connection, credential providers
Windows AD/LDAP experience
Cloud experience (AWS/Azure/GCP)
SIEM/logging, monitoring
Working knowledge of RESTAPI and PowerShell scripting
Working with Audit and controls teams and meet compliance requirements
Monitoring and logging/SIEM - Elastic, Reporting/Metrics

Responsibilities

Assist with the management of roles and safes.
Deploy software updates.
Prepare reports that highlight the performance and security of the PAM tool.
Identify and mitigate security vulnerabilities.
Provide support for on-call troubleshooting and remediation efforts related to the PAM solution.
Support annual disaster recovery testing.
Aid in documenting recovery and contingency plans.
Assist with operating system patching on vault appliances.
Ensure the PAM solution meets and exceeds security requirements.
Follow DOT’s Change Management processes.
Contribute to the enhancement of reporting capabilities in line with DHS CISA requirements.
Perform day-to-day activities required to assist and identify technology solutions that meet enterprise requirements.
Map functional requirements into technological requirements and identify technologies that meet the technological requirements.
Conduct proof of concept, pilots and demos for the purpose of evaluating the suitability of given technologies for meeting requirements.
Evaluate the tradeoffs between competing solutions and develop quantitative driven analysis of alternatives.
Produce written analysis of research and recommendation papers that clearly describe the process followed, alternatives considered, evaluation criteria and rationale for recommendation and need for additional work.