CyberArk Solutions Engineer

COGNOSTRATEGY LLC • Washington, DC, DC

7d

About The Position

The CyberArk Solutions Engineer supports the Department of Transportation’s cybersecurity infrastructure by working with senior engineers to deploy and maintain a Privileged Access Management (PAM) solution across development, testing, and production environments. The role involves coordinating with stakeholders, including DHS CISA integrators, and supporting system security, availability, and reporting in accordance with DOT change-management processes and DHS CISA requirements.

The engineer assists with managing roles and safes, deploying software updates, preparing PAM performance and security reports, identifying and mitigating vulnerabilities, and providing on-call troubleshooting and remediation support. The role also supports annual disaster recovery testing, documentation of recovery and contingency plans, and operating-system patching on vault appliances.

The position also contributes to identifying and evaluating technology solutions for enterprise requirements. This includes translating functional requirements into technology requirements, conducting proofs of concept, pilots, and demonstrations, assessing competing solutions, developing quantitative analyses of alternatives, and preparing research and recommendation papers documenting the evaluation process and rationale.

Requirements

• At least 5 years of related experience providing business solutions engineering support, including architectural design, engineering design, proof-of-concept development, pilots, analysis, results, and documentation.
• Current Certified CyberArk Sentry credential.
• At least 1 year of experience designing and implementing integrated CyberArk lifecycle management processes in an organization comparable in scale to the Department of Transportation.
• At least 3 years of server administration experience, including Windows Server 2019 and Red Hat Enterprise Linux (RHEL) 8.
• Experience with CyberArk products, including troubleshooting and analyzing debug logs, password management/CPM, PSM/PSMP secure connections, and credential providers.
• Background in Windows/Linux systems and networking; IT and DevOps experience is helpful.
• Experience with Windows AD/LDAP, cloud environments (AWS, Azure, or GCP), SIEM/logging, and monitoring.
• Working knowledge of REST APIs and PowerShell scripting.
• Experience working with audit and controls teams and meeting compliance requirements.
• Experience with monitoring, logging/SIEM, Elastic, and reporting/metrics.
• Must be a U.S. citizen or green card holder who has resided in the U.S. for at least 3 years and be able to obtain a public trust.

Nice To Haves

• Bachelor’s degree, preferred, with IT/cybersecurity experience in IAM/PAM.
• Proficiency integrating CyberArk with SailPoint.
• Extensive Active Directory experience, including account management, Group Policy, AD Schema, Public Key Infrastructure (PKI), and PowerShell automation.
• Understanding of SQL Server 2019 database management, including backups, indexing, integrity checks, installation, configuration, ports and protocols, maintenance plans, and troubleshooting.
• Experience with data modeling and schemas, including interpreting and navigating Entity Relationship Diagrams.
• Experience configuring CyberArk for secure collaboration with networks, iDRAC interfaces, applications, cloud services, storage solutions, servers, and appliances.

Responsibilities

• Assist with deploying and maintaining the PAM solution across development, testing, and production environments.
• Work with stakeholders, including DHS CISA integrators, to support PAM operations.
• Assist with management of roles and safes.
• Help deploy software updates.
• Prepare reports on PAM tool performance and security and contribute to reporting enhancements aligned with DHS CISA requirements.
• Identify and help mitigate security vulnerabilities.
• Provide on-call troubleshooting and remediation support for the PAM solution.
• Support annual disaster recovery testing and document recovery and contingency plans.
• Assist with operating-system patching on vault appliances.
• Follow DOT Change Management processes.
• Identify technology solutions that meet enterprise requirements and map functional requirements to technological requirements.
• Conduct proofs of concept, pilots, and demonstrations to evaluate technologies.
• Evaluate tradeoffs between competing solutions and develop quantitative analyses of alternatives.
• Produce research and recommendation papers describing the process, alternatives, evaluation criteria, recommendation rationale, and need for additional work.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed