Mid-Level CyberArk Engineer
About The Position
The Mid-Level CyberArk Engineer supports the Department of Transportation’s cybersecurity infrastructure by helping deploy and maintain a Privileged Access Management (PAM) solution. Working alongside senior engineers and coordinating with stakeholders, including DHS CISA integrators, the engineer helps ensure the system operates across development, testing, and production environments. The position is onsite in Washington, DC. The engineer assists with roles and safes management, software updates, performance and security reporting, vulnerability identification and mitigation, and on-call troubleshooting and remediation. Additional duties include supporting annual disaster recovery testing, documenting recovery and contingency plans, and assisting with operating system patching on vault appliances. The role follows DOT Change Management processes and contributes to reporting improvements aligned with DHS CISA requirements. The position also involves identifying technology solutions for enterprise requirements, translating functional requirements into technological requirements, conducting proofs of concept, pilots, and demonstrations, comparing competing solutions, and preparing written analyses and recommendations. The role requires a current CyberArk Sentry certification, relevant engineering support experience, CyberArk implementation experience, server administration experience, and eligibility to obtain a Public Trust.
Requirements
- At least 5 years of related experience providing business solutions engineering support, including architectural design, engineering design, proof-of-concept development, pilots, analysis, results, and documentation.
- Current Certified CyberArk Sentry credential.
- At least 1 year of experience designing and implementing integrated CyberArk lifecycle management processes in an organization comparable in scale to DOT.
- At least 3 years of server administration experience, including proficiency with Windows Server 2019 and Red Hat Enterprise Linux (RHEL) 8.
- Background in Windows/Linux systems and networking; IAM/PAM CyberArk product support and troubleshooting, including debug-log analysis, password management/CPM, PSM/PSMP secure connections, and credential providers.
- Working knowledge of REST APIs and PowerShell scripting.
- Must be a U.S. citizen or green card holder, have resided in the U.S. for at least 3 years, and be able to obtain a Public Trust.
- Bachelor’s degree preferred; additional experience may be considered in lieu of a degree.
Nice To Haves
- IT and DevOps experience.
- Experience with Windows AD/LDAP, cloud platforms (AWS, Azure, or GCP), SIEM/logging, monitoring, and reporting/metrics tools such as Elastic.
- Proficiency integrating CyberArk with SailPoint.
- Comprehensive Active Directory experience, including account management, Group Policy, AD Schema, PKI, and PowerShell automation.
- Database management knowledge, specifically SQL Server 2019, including backups, indexing, integrity checks, installation, configuration, ports and protocols, maintenance plans, troubleshooting, data modeling, schemas, and Entity Relationship Diagrams.
- Experience configuring CyberArk to securely work with networks, iDRAC interfaces, applications, cloud services, storage solutions, servers, and appliances.
Responsibilities
- Assist with deployment and ongoing maintenance of the PAM solution across development, testing, and production environments.
- Assist with managing CyberArk roles and safes and deploying software updates.
- Contribute to reports on PAM tool performance and security, and enhance reporting capabilities in line with DHS CISA requirements.
- Identify and help mitigate security vulnerabilities; provide on-call troubleshooting and remediation support for the PAM solution.
- Support annual disaster recovery testing and document recovery and contingency plans.
- Assist with operating system patching on vault appliances.
- Follow DOT Change Management processes.
- Assist in identifying technology solutions that meet enterprise requirements and map functional requirements to technological requirements.
- Conduct proofs of concept, pilots, and demonstrations to evaluate technologies.
- Evaluate tradeoffs between solutions and develop quantitative analyses of alternatives.
- Prepare written research and recommendation papers describing the process, alternatives, evaluation criteria, rationale, and any need for further work.
- Work with audit and controls teams and meet compliance requirements.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
