CyberArk EPM Operations Security Analyst III

Elevance Health•St. Louis, MO

2d•Hybrid

About The Position

The CyberArk EPM Operations Security Analyst III is responsible for providing enterprise security solutions for business, regulatory, and legal requirements, and assuring the confidentiality, integrity, and availability of information assets. The role will provide 24x7 operational support for CyberArk Endpoint Privilege Manager (EPM) and related privileged access services. This role is responsible for processing privilege elevation requests, validating approvals and governance requirements, administering temporary elevated access, monitoring privileged activity, and supporting audit and compliance obligations. The analyst partners closely with CyberArk Engineering, IAM, Cyber Security, Infrastructure, and Application Support teams to enable secure administrative access while supporting the organization's Least Privilege, Zero Standing Privilege (ZSP), and Identity Security initiatives.

Requirements

Requires an BA/BS degree in Information Technology, Computer Science or related field of study and a minimum of 3 years of experience in a support and operations or design and engineering role; or any combination of education and experience, which would provide an equivalent background.

Nice To Haves

Strong understanding of Identity and Access Management (IAM), Privileged Access Management (PAM), and access governance principles preferred.
Knowledge of Least Privilege, Zero Standing Privilege (ZSP), Tier-0 security, Zero Trust, and Identity Threat Detection & Response (ITDR) concepts preferred.
Experience with Active Directory, security groups, and Role-Based Access Control (RBAC) preferred.
Experience supporting Windows Server environments preferred.
Familiarity with ServiceNow or similar ITSM platforms preferred.
Ability to analyze logs, audit records, telemetry, and security events preferred.
CyberArk Endpoint Privilege Manager (EPM) experience preferred.
CyberArk PAM / PSM experience preferred.
SailPoint Identity Security Cloud experience preferred.
PowerShell scripting experience preferred.
REST APIs and automation experience preferred.
BigFix or endpoint management platforms experience preferred.
Windows Security and endpoint protection technologies experience preferred.
3–5 years of experience in PAM, IAM, Security Operations, Windows Administration, Access Governance, or Infrastructure Operations preferred.
Experience supporting enterprise server environments and access management processes preferred.
Experience working within formal change management, approval, and compliance frameworks preferred.
CyberArk EPM or CyberArk PAM administration experience preferred.
Experience supporting regulated industries such as Healthcare, Insurance, Financial Services, or Government preferred.
Experience supporting 24x7 operational environments preferred.

Responsibilities

Process and fulfill CyberArk EPM privilege elevation requests through ServiceNow.
Validate business justification, approvals, and change management requirements.
Assign and remove temporary elevated access in accordance with approved procedures.
Support emergency and break-glass access requests.
Ensure all privileged access activities are properly documented and auditable.
Administer day-to-day CyberArk EPM operations and policy assignments.
Validate EPM agent health, policy deployment, and endpoint compliance.
Troubleshoot access, policy enforcement, and elevation issues.
Coordinate with Engineering teams to resolve complex technical problems.
Support new policy rollouts, platform updates, and operational readiness activities.
Monitor privileged activity, telemetry, and operational dashboards.
Investigate policy violations, unauthorized privilege use, and operational issues.
Support incident response activities and perform root cause analysis (RCA) for access-related incidents.
Generate operational metrics, reporting, and audit evidence.
Support internal audits, compliance reviews, and periodic access certifications.
Partner with Engineering, Cyber Security, IAM, Infrastructure, and Application teams to support secure privileged access services.
Assist with implementation and enforcement of security controls, least-privilege practices, and access governance standards.
Contribute to the standardization and continuous improvement of operational procedures, runbooks, and documentation.
Identify opportunities for automation, process improvements, and operational efficiencies.
Participate and complete tasks associated with the implementations for systems and network security technologies.
Provide trouble resolution on complex issues.
Perform system and network upgrade tasks.
Design and analyze vendor services and information security requirements; maintains relationship with key vendors.
Responds to Level 3 and 4 change and problem requests.
Leads Level 1 and 2 incident recoveries and root cause analysis.
Coordinates and prepares reporting of data security events and incidents.
Maintains relationship with key vendors
Performs system and network upgrade tasks.
Participates and completes lights-on initiatives to consolidate equipment and/or implement business relocations