CyberArk Engineer Mid

SAIC•Washington, DC

11h•Onsite

About The Position

The Mid-Level CyberArk Engineer supports enhancement of the Department of Transportation’s cybersecurity infrastructure by helping deploy and maintain a Privileged Access Management (PAM) solution. Working alongside senior engineers and engaging with stakeholders, including DHS CISA integrators, the engineer supports the solution across development, testing, and production environments. The role assists with managing CyberArk roles and safes, deploying software updates, preparing performance and security reports, identifying and mitigating vulnerabilities, and providing on-call troubleshooting and remediation support. It also supports annual disaster recovery testing, recovery and contingency plan documentation, and operating system patching for vault appliances. The engineer follows DOT Change Management processes and helps improve reporting capabilities in line with DHS CISA requirements. The position also assists in identifying technology solutions that meet enterprise requirements, translating functional requirements into technical requirements, conducting proofs of concept, pilots and demonstrations, evaluating competing solutions, and producing written analyses and recommendations. The role is onsite in Washington, DC, despite the listing’s separate indication of potential hybrid remote work.

Requirements

At least 5 years of related experience providing business solutions engineering support, including architectural design, engineering design, proof-of-concept development, pilots, analysis, results, and documentation.
Current Certified CyberArk Sentry credential.
At least 1 year of experience designing and implementing integrated CyberArk lifecycle management processes in an organization comparable in scale to the Department of Transportation.
At least 3 years of server administration experience, including proficiency with Windows Server 2019 and Red Hat Enterprise Linux (RHEL) 8.
CyberArk IAM/PAM product support experience, including troubleshooting and analyzing debug logs, password management/CPM, PSM/PSMP secure connections, and credential providers.
Background in Windows/Linux systems and networking; IT and DevOps experience is helpful.
Experience with Windows Active Directory/LDAP, cloud environments (AWS, Azure, or GCP), SIEM/logging, and monitoring.
Working knowledge of REST API and PowerShell scripting.
Experience working with audit and controls teams and meeting compliance requirements.
Experience with monitoring, logging/SIEM, Elastic, and reporting/metrics.
Must be a U.S. citizen or green card holder, have resided in the U.S. for at least 3 years, and be able to obtain a Public Trust.

Nice To Haves

Bachelor’s degree; additional experience may be considered in lieu of a degree.
Proficiency integrating CyberArk with SailPoint.
Comprehensive Active Directory experience, including account management, Group Policy, AD Schema, Public Key Infrastructure (PKI), and PowerShell automation.
Database management knowledge, specifically SQL Server 2019, including backups, indexing, integrity checks, installation, configuration, ports and protocols, maintenance plans, troubleshooting, data modeling, schemas, and Entity Relationship Diagrams.
Experience configuring CyberArk to work securely with networks, iDRAC interfaces, applications, cloud services, storage, servers, and appliances.

Responsibilities

Support deployment and ongoing maintenance of the CyberArk Privileged Access Management solution across development, testing, and production environments.
Work with senior engineers and stakeholders, including DHS CISA integrators, to support PAM operations.
Assist with managing CyberArk roles and safes and deploying software updates.
Contribute to reports on PAM tool performance and security, and help enhance reporting in line with DHS CISA requirements.
Identify and help mitigate security vulnerabilities.
Provide on-call troubleshooting and remediation support related to the PAM solution.
Support annual disaster recovery testing and document recovery and contingency plans.
Assist with operating system patching on vault appliances.
Follow DOT Change Management processes.
Identify technology solutions that meet enterprise requirements and map functional requirements to technical requirements.
Conduct proofs of concept, pilots, and demonstrations to evaluate technology suitability.
Evaluate competing solutions and develop quantitative analyses of alternatives.
Prepare written research and recommendation papers describing the process, alternatives, evaluation criteria, rationale, and any need for further work.