CyberArk Engineer

ASRC Federal•Quantico, VA

10d•Hybrid

About The Position

ASRC Federal is hiring a CyberArk Engineer to support its Defense Counterintelligence Security Agency (DCSA) program. The role is based in Quantico, Virginia, and is primarily telework, with onsite work at Quantico Marine Corps Base required at least two days per week or as needed. The engineer will specialize in Privileged Access Management (PAM) and be responsible for the architecture, implementation, and maintenance of the CyberArk environment. The role helps protect and manage privileged credentials and access, support compliance with security policies, and mitigate risks associated with privileged accounts. The engineer will design, deploy, and maintain the CyberArk Privileged Access Security (PAS) suite, including Enterprise Password Vault (EPV), Privileged Session Manager (PSM), and Central Policy Manager (CPM). They will manage policies, Safes, access workflows, privileged account onboarding and integrations, platform operations, session monitoring, and Tier 3 support. The role also involves collaboration with system administrators, application owners, and security teams; documentation and training; and keeping current with CyberArk features, PAM strategies, and emerging security threats. For alternate worksites outside DCSA facilities or corporate office space, the employee must have a reliable means of voice communication (cell phone preferred) and a stable, capable internet connection. The employee must be able to communicate complex technical ideas verbally and in writing to a diverse customer base.

Requirements

At least 5 years of hands-on experience with the CyberArk PAS suite in an enterprise environment.
Strong understanding of PAM, IAM principles, and security best practices.
Active Secret Clearance, required, and eligibility to be upgraded to TS/SCI.
Must meet 8570 certification requirements at the time of hire, with IAT Level II certification (for example, Security+ CE, CCNA Security, CySA+, GICSP, GSEC, SCCP, or a higher-tiered 8570 certification).
Bachelor's degree in Cybersecurity, Information Systems Management, or a related field, or an equivalent combination of military service and/or at least 5 years of significant, relevant work experience.
Ability to communicate complex technical ideas verbally and in writing to a diverse customer base.
For alternate worksite locations outside DCSA facilities or corporate office space, reliable voice communication and a stable, capable internet connection are required.

Nice To Haves

CyberArk Defender certification.
CyberArk Sentry certification.
CyberArk Guardian certification.

Responsibilities

Design, deploy, and maintain the CyberArk PAS suite, including EPV, PSM, and CPM.
Develop and implement policies for secure credential management, session monitoring, and access control; manage Safes and access workflows.
Lead onboarding of privileged accounts, including servers, databases, network devices, and applications.
Integrate CyberArk with enterprise systems such as Active Directory, SIEM, and ticketing platforms.
Maintain the health and operational stability of the CyberArk infrastructure, including upgrades, patching, and performance tuning.
Investigate and respond to security alerts from Privileged Threat Analytics (PTA) and review privileged sessions for anomalous activity.
Collaborate with system administrators, application owners, and security teams to implement and use PAM controls.
Provide Tier 3 support for the CyberArk platform.
Create and maintain documentation for CyberArk architecture, configurations, and operational procedures.
Provide training to end-users and support staff.
Stay current with CyberArk features, PAM strategies, and emerging security threats to enhance the organization's security posture.