Mid-Level CyberArk Engineer

SAIC•Washington, DC

18h•Onsite

About The Position

The Mid-Level CyberArk Engineer supports and enhances the Department of Transportation’s cybersecurity infrastructure by helping deploy and maintain a Privileged Access Management (PAM) solution across development, testing, and production environments. The engineer works alongside senior engineers and engages with stakeholders, including DHS CISA integrators, to maintain the solution and ensure it meets security requirements and DHS CISA reporting needs. The role includes assisting with role and safe management, software updates, performance and security reporting, vulnerability identification and mitigation, on-call troubleshooting and remediation, annual disaster recovery testing, recovery and contingency documentation, and operating system patching on vault appliances. The engineer follows DOT Change Management processes and contributes to improved PAM reporting. The position also involves identifying technology solutions that meet enterprise requirements, mapping functional requirements to technological requirements, conducting proofs of concept, pilots, and demonstrations, evaluating competing solutions and tradeoffs, and preparing written analyses and recommendations. The role is onsite in Washington, DC.

Requirements

At least 5 years of related experience providing business solutions engineering support, including architectural design, engineering design, proof-of-concept development, pilots, analysis, results, and documentation.
Current Certified CyberArk Sentry credential.
At least 1 year of experience designing and implementing integrated CyberArk lifecycle management processes in an organization comparable in scale to DOT.
At least 3 years of server administration experience, including Windows Server 2019 and Red Hat Enterprise Linux (RHEL) 8.
CyberArk IAM/PAM product support experience, including troubleshooting and analyzing debug logs, password management/CPM, PSM/PSMP secure connections, and credential providers.
Background in Windows/Linux systems and networking.
Working knowledge of REST APIs and PowerShell scripting.
Experience working with audit and controls teams and meeting compliance requirements.
U.S. citizenship or green card status, at least 3 years of U.S. residency, and ability to obtain a public trust.
Bachelor’s degree preferred; additional experience may be considered in lieu of a degree.

Nice To Haves

IT and DevOps experience.
Experience with Windows AD/LDAP.
Cloud experience with AWS, Azure, or GCP.
Experience with SIEM, logging, monitoring, Elastic, and reporting/metrics.
Proficiency integrating CyberArk with SailPoint.
Comprehensive Active Directory experience, including account management, Group Policy, AD Schema, PKI, and PowerShell automation.
Understanding of database management, particularly SQL Server 2019, including backups, indexing, integrity checks, installation, configuration, ports and protocols, maintenance plans, troubleshooting, data modeling, schemas, and Entity Relationship Diagrams.
Experience configuring CyberArk for secure collaboration with networks, iDRAC interfaces, applications, cloud services, storage, servers, and appliances.

Responsibilities

Assist with deploying and maintaining the CyberArk PAM solution across development, testing, and production environments.
Assist with managing PAM roles and safes and deploying software updates.
Prepare reports on PAM tool performance and security, and contribute to reporting enhancements aligned with DHS CISA requirements.
Identify and help mitigate security vulnerabilities.
Provide on-call troubleshooting and remediation support related to the PAM solution.
Support annual disaster recovery testing and document recovery and contingency plans.
Assist with operating system patching on vault appliances.
Follow DOT Change Management processes.
Assist in identifying technology solutions that meet enterprise requirements and map functional requirements to technological requirements.
Conduct proofs of concept, pilots, and demonstrations to evaluate technologies.
Evaluate tradeoffs between competing solutions and develop quantitative analyses of alternatives.
Prepare written research and recommendation papers documenting the process, alternatives, evaluation criteria, rationale, and need for additional work.
Work with stakeholders, including DHS CISA integrators, and audit and controls teams to support compliance requirements.