CyberArk & Endpoint Security Engineer

RulesIQ; Lutz (FL); Hybrid; USD 110,000 - 160,000; Full time

Job summary

RulesIQ is seeking a CyberArk & Endpoint Security Engineer to design, implement, and maintain our enterprise identity and endpoint security platforms. You will lead the deployment and management of CyberArk PAM and CyberArk EPM, enforcing least privilege and eliminating standing local admin rights across thousands of workstations to secure high-value infrastructure credentials.

Responsibilities include platform administration, EPM policy design, credential management via CPM/PSM, agent

Qualifications

• 3+ years hands-on CyberArk PAM and EPM experience.
• Deep knowledge of Windows OS (UAC, Registry, Local Groups) and macOS security.
• Strong AD/Azure AD/Entra ID, GPOs, and LDAP expertise.
• Experience deploying software/config profiles via Intune, SCCM, or Jamf.
• Scripting skills in PowerShell, Python, or Bash for automation.
• Security fundamentals: TLS/SSL, SIEM integrations, IAM concepts (SAML, OIDC, MFA).

Responsibilities

• Design, deploy, and maintain CyberArk PAM and EPM environments.
• Enforce least privilege by removing local admin rights across endpoints.
• Configure automated password rotation, CPM/PSM policies.
• Deploy EPM agents globally with Intune/Jamf/SCCM.
• Develop scripts for onboarding and REST API automation; integrate with ServiceNow.
• Provide Tier 3 escalation support for credential rotation failures and agent issues.

Skills

CyberArk PAM/EPM

Windows security

macOS security

AD/Azure AD/Entra ID

Intune/SCCM/Jamf

PowerShell/Python/Bash

IAM concepts (SAML, OIDC, MFA)

CyberArk REST APIs

TLS/SSL, SIEM (Splunk)

Tools

Intune

SCCM

Jamf

Job description

RulesIQ is seeking a CyberArk & Endpoint Security Engineer to design, implement, and maintain our enterprise identity and endpoint security platforms. You will lead the deployment and management of CyberArk PAM and CyberArk EPM, enforcing least privilege and eliminating standing local admin rights across thousands of workstations to secure high-value infrastructure credentials.

Responsibilities include platform administration, EPM policy design, credential management via CPM/PSM, agent