CyberArk Solutions Engineer

Cognostrategy • Washington, DC

1d • Onsite

About The Position

The CyberArk Solutions Engineer supports the Department of Transportation’s cybersecurity infrastructure by assisting senior engineers with deployment and ongoing maintenance of a Privileged Access Management (PAM) solution across development, testing, and production environments. The role involves working with key stakeholders, including DHS CISA integrators, and following DOT Change Management processes to help ensure the PAM solution meets security requirements and DHS CISA reporting requirements.

The engineer assists with managing roles and safes, deploying software updates, preparing performance and security reports, identifying and mitigating vulnerabilities, and supporting on-call troubleshooting and remediation for the PAM solution. Other duties include supporting annual disaster recovery testing, documenting recovery and contingency plans, and assisting with operating system patching on vault appliances.

The position also supports identification and evaluation of enterprise technology solutions. This includes translating functional requirements into technical requirements, assessing technologies, conducting proofs of concept, pilots, and demonstrations, analyzing tradeoffs between competing solutions, and preparing written research and recommendation papers that document the process, alternatives, evaluation criteria, rationale, and further work needed. The work is on-site at the DOT office in Washington, DC.

Requirements

• At least 5 years of related experience providing business solutions engineering support, including architectural design, engineering design, proof-of-concept development, pilots, analysis, results, and documentation.
• Current Certified CyberArk Sentry credential.
• One year of experience designing and implementing integrated lifecycle management processes for CyberArk in an organization comparable in scale to DOT.
• Three years of server administration experience, with proficiency in Windows Server 2019 and Red Hat Enterprise Linux (RHEL) 8.
• CyberArk product support experience, including troubleshooting and analyzing debug logs; password management/CPM; PSM/PSMP secure connections; and credential providers.
• Experience with Windows AD/LDAP, cloud environments (AWS, Azure, or GCP), SIEM/logging, and monitoring.
• Working knowledge of REST API and PowerShell scripting.
• Experience working with audit and controls teams and meeting compliance requirements.
• The candidate must be a U.S. citizen or green card holder, have resided in the U.S. for at least 3 years, and be able to obtain a public trust.

Nice To Haves

• Bachelor’s degree, preferred, with IT/cybersecurity experience in IAM/PAM.
• Systems (Windows/Linux), networking, IT, and DevOps background.
• Monitoring and logging/SIEM experience, including Elastic, reporting, and metrics.
• Proficiency integrating CyberArk with SailPoint.
• Extensive Active Directory experience, including account management, Group Policy, AD Schema, PKI, and PowerShell automation.
• Understanding of SQL Server 2019 administration, including backups, indexing, integrity checks, installation, configuration, ports and protocols, maintenance plans, troubleshooting, data modeling, schemas, and Entity Relationship Diagrams.
• Experience configuring CyberArk for secure collaboration with networks, iDRAC interfaces, applications, cloud services, storage, servers, and appliances.

Responsibilities

• Assist with deployment and ongoing maintenance of the PAM solution across development, testing, and production environments.
• Engage with stakeholders, including DHS CISA integrators, to support PAM operations.
• Assist with management of PAM roles and safes and deployment of software updates.
• Prepare reports on PAM tool performance and security, and contribute to reporting capabilities aligned with DHS CISA requirements.
• Identify and help mitigate security vulnerabilities; provide on-call troubleshooting and remediation support related to the PAM solution.
• Support annual disaster recovery testing and document recovery and contingency plans.
• Assist with operating system patching on vault appliances.
• Follow DOT Change Management processes.
• Assist in identifying technology solutions that meet enterprise requirements and map functional requirements to technological requirements.
• Conduct proofs of concept, pilots, and demonstrations to evaluate technologies against requirements.
• Evaluate tradeoffs between competing solutions and develop quantitative analysis of alternatives.
• Produce written research and recommendation papers describing the process, alternatives considered, evaluation criteria, recommendation rationale, and need for additional work.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed