CyberArk Engineer

ASRC Federal•Quantico, VA

17h•$140,000 - $159,890•Hybrid

About The Position

ASRC Federal is hiring a CyberArk Engineer to support its Defense Counterintelligence Security Agency (DCSA) program based out of Quantico, Virginia. The role is primarily telework, with a requirement to work onsite at least two days per week or as needed at Quantico Marine Corps Base. The engineer will join the cybersecurity infrastructure team and specialize in Privileged Access Management (PAM), protecting and managing privileged credentials and access, supporting security-policy compliance, and mitigating risks associated with privileged accounts. The role is responsible for architecture, implementation, and maintenance of the CyberArk environment, including the CyberArk Privileged Access Security (PAS) suite. It also provides Tier 3 platform support and requires collaboration with system administrators, application owners, and security teams. The position requires an active Secret clearance, eligibility for upgrade to TS/SCI, and compliance with 8570 certification requirements at hire.

Requirements

At least five years of hands-on experience with the CyberArk Privileged Access Security (PAS) suite in an enterprise environment.
Strong understanding of Privileged Access Management (PAM), identity and access management (IAM) principles, and security best practices.
Active Secret clearance, with eligibility to be upgraded to TS/SCI.
Must meet 8570 certification requirements at the time of hire: IAT Level II certification, such as Security+ CE, CCNA Security, CySA+, GICSP, GSEC, SCCP, or a higher-tiered 8570 certification.
Bachelor's degree in Cybersecurity, Information Systems Management, or a related field, or an equivalent combination of military service and/or at least five years of significant, relevant work experience.
Ability to communicate complex technical ideas verbally and in writing to a diverse customer base.
For an alternate worksite outside DCSA facilities or corporate office space, reliable voice communication (cell phone preferred) and a stable, capable internet connection are required.

Nice To Haves

CyberArk Defender certification.
CyberArk Sentry certification.
CyberArk Guardian certification.

Responsibilities

Design, deploy, and maintain the CyberArk PAS suite, including Enterprise Password Vault (EPV), Privileged Session Manager (PSM), and Central Policy Manager (CPM).
Develop and implement policies for secure credential management, session monitoring, and access control; administer Safes and access workflows.
Lead onboarding of privileged accounts for servers, databases, network devices, and applications into CyberArk.
Integrate CyberArk with enterprise systems such as Active Directory, SIEM, and ticketing platforms.
Maintain CyberArk infrastructure health and operational stability, including upgrades, patching, and performance tuning.
Investigate and respond to security alerts from Privileged Threat Analytics (PTA) and review privileged sessions for anomalous activity.
Collaborate with system administrators, application owners, and security teams on PAM controls and provide Tier 3 CyberArk platform support.
Create and maintain documentation for CyberArk architecture, configurations, and operational procedures.
Provide training to end-users and support staff.
Stay current with CyberArk features, PAM strategies, and emerging security threats to enhance the organization's security posture.