Mid-Level CyberArk Engineer
About The Position
The Mid-Level CyberArk Engineer supports the Department of Transportation’s cybersecurity infrastructure by helping deploy and maintain its Privileged Access Management (PAM) solution. Working alongside senior engineers and engaging stakeholders, including DHS CISA integrators, the engineer helps ensure the solution operates across development, testing, and production environments. The role supports management of roles and safes, software updates, performance and security reporting, vulnerability identification and mitigation, and on-call PAM troubleshooting and remediation. It also contributes to annual disaster recovery testing, documentation of recovery and contingency plans, operating system patching on vault appliances, and enhancement of reporting capabilities in accordance with DHS CISA requirements. Work follows DOT Change Management processes. The engineer also assists with identifying technology solutions for enterprise requirements, mapping functional requirements to technical requirements, evaluating technologies through proofs of concept, pilots, and demonstrations, analyzing tradeoffs among solutions, and preparing written research and recommendation papers. The position is onsite in Washington, DC.
Requirements
- Bachelor’s degree preferred in a relevant area; additional experience may be considered in lieu of a degree.
- At least 5 years of related experience providing business solutions engineering support, including architectural and engineering design, proof-of-concept development, pilots, analysis, results, and documentation.
- Current CyberArk Sentry certification.
- At least 1 year of experience designing and implementing integrated lifecycle management processes for CyberArk in an organization comparable in scale to DOT.
- At least 3 years of server administration experience, including Windows Server 2019 and Red Hat Enterprise Linux (RHEL) 8.
- Background in Windows/Linux systems and networking; IT and DevOps experience is helpful in addition to IAM/PAM experience.
- CyberArk product support experience, including troubleshooting and analyzing debug logs, password management/CPM, PSM/PSMP secure connections, and credential providers.
- Experience with Windows AD/LDAP, cloud platforms (AWS, Azure, or GCP), SIEM/logging, and monitoring.
- Working knowledge of REST API and PowerShell scripting.
- Experience working with audit and controls teams and meeting compliance requirements.
- U.S. citizen or green card holder who has resided in the U.S. for at least 3 years, with the ability to obtain a public trust.
Nice To Haves
- Proficiency integrating CyberArk with SailPoint.
- Extensive Active Directory experience, including account management, Group Policy, AD Schema, Public Key Infrastructure (PKI), and PowerShell automation.
- Understanding of SQL Server 2019 database management, including backups, indexing, integrity checks, installation, configuration, ports and protocols, maintenance plans, troubleshooting, data modeling, schema, and Entity Relationship Diagrams.
- Experience configuring CyberArk to work securely with networks, iDRAC interfaces, applications, cloud services, storage solutions, servers, and appliances.
- Experience with Elastic, reporting, and metrics.
Responsibilities
- Assist with deployment and ongoing maintenance of the PAM solution across development, testing, and production environments.
- Manage roles and safes and help deploy software updates.
- Prepare reports on PAM tool performance and security, and enhance reporting capabilities in line with DHS CISA requirements.
- Identify and mitigate security vulnerabilities; provide on-call troubleshooting and remediation support for the PAM solution.
- Support annual disaster recovery testing and document recovery and contingency plans.
- Assist with operating system patching on vault appliances.
- Follow DOT Change Management processes and coordinate with stakeholders, including DHS CISA integrators.
- Assist in identifying technology solutions that meet enterprise requirements and map functional requirements to technical requirements.
- Conduct proofs of concept, pilots, and demonstrations to evaluate technology suitability.
- Evaluate tradeoffs between competing solutions and develop quantitative analyses of alternatives.
- Produce written research and recommendation papers describing processes, alternatives, evaluation criteria, rationale, and additional work needed.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
