CyberArk Engineer

ASRC Federal; Quantico (VA); Hybrid; USD 110,000 - 165,000; Full time

Job summary

ASRC Federal is actively hiring a CyberArk Engineer to join our cybersecurity infrastructure team supporting the DCSA program out of Quantico, VA. This role focuses on PAM architecture, implementation, and maintenance of the CyberArk environment, ensuring secure privileged access controls across enterprise assets.

The position is primarily telework with onsite requirements of up to two days per week at Quantico, and occasional travel as needed.

Qualifications

• 5+ years of hands-on CyberArk PAS in an enterprise environment.
• Strong understanding of Privileged Access Management (PAM), IAM principles, and security best practices.
• Active Secret Clearance REQUIRED, eligible for TS/SCI.
• Must meet 8570 certification requirements at hire (IAT Level II).
• Bachelor's Degree in Cybersecurity, Information Systems Management or related field.
• CyberArk Defender/Sentry/Guardian certifications are highly desired.

Responsibilities

• PAM Architecture and Implementation: design, deploy, and maintain CyberArk PAS suite (EPV, PSM, CPM).
• Policy and Safe Management: develop and implement secure credential management, session monitoring, and access controls.
• Account Onboarding and Integration: onboard privileged accounts and integrate CyberArk with AD, SIEM, and ticketing systems.
• Platform Operations and Maintenance: ensure health, upgrades, patching, performance tuning of CyberArk infrastructure.
• Privileged Session Monitoring: investigate alerts from PTA and review privileged sessions for anomalies.
• Collaboration and Support: provide Tier 3 support and work with admins, owners, and security teams.
• Documentation and Training: maintain architecture docs and train end-users and staff.
• Stay Current: keep up with CyberArk features and evolving PAM strategies.

Skills

PAM

CyberArk

IAM

Active Directory

SIEM

Networking

8570 Certification

Education

Bachelor's degree in Cybersecurity or related field

Tools

CyberArk PAS

EPV

PSM

CPM

Job description

ASRC Federal is actively hiring a CyberArk Engineer in support of our Defense Counterintelligence Security Agency (DCSA) program based out of Quantico VA.

This is primarily a Telework position with a requirement to be onsite at least two (2) days a week or as needed at Quantico Marine Corps Base VA.

Position Description:

We are seeking a dedicated and experienced CyberArk Engineer to join our cybersecurity infrastructure team. The ideal candidate will specialize in Privileged Access Management (PAM) and will be responsible for the architecture, implementation, and maintenance of our CyberArk environment. This role is critical for protecting and managing the organization's privileged credentials and access, ensuring compliance with security policies, and mitigating risks associated with privileged accounts.

Minimum Requirements:

• Minimum of 5 years of hands-on experience with the CyberArk Privileged Access Security (PAS) suite in an enterprise environment.
• Strong understanding of Privileged Access Management (PAM), identity and access management (IAM) principles, and security best practices.
• Active Secret Clearance REQUIRED, eligible to be upgraded to TS/SCI.
• Must meet 8570 certification requirements at the time of hire. IAT Level II (e.g., Security+ CE, CCNA Security, CySA+, GICSP, GSEC, SCCP or higher tiered 8570 certification.
• Bachelor's Degree, in Cybersecurity, Information Systems Management or a related field or an equivalent combination of military service and/or at least five (5) years of significant, relevant work experience.
• CyberArk certificationsare highly desired, such as:
• CyberArk Defender
• CyberArk Sentry
• CyberArk Guardian

Responsibilities:

• PAM Architecture and Implementation: Design, deploy, and maintain the CyberArk PAS suite, including the Enterprise Password Vault (EPV), Privileged Session Manager (PSM), and Central Policy Manager (CPM).
• Policy and Safe Management: Develop and implement policies for secure credential management, session monitoring, and access control. Manage the creation and administration of Safes and access workflows.
• Account Onboarding and Integration: Lead the onboarding of privileged accounts into CyberArk, including servers, databases, network devices, and applications. Integrate CyberArk with enterprise systems like Active Directory, SIEM, and ticketing platforms.
• Platform Operations and Maintenance: Ensure the health and operational stability of the CyberArk infrastructure, including component upgrades, patching, and performance tuning.
• Privileged Session Monitoring: Act as a subject matter expert for privileged access, investigating and responding to security alerts from Privileged Threat Analytics (PTA), and reviewing privileged sessions for anomalous activity.
• Collaboration and Support: Work closely with system administrators, application owners, and security teams to ensure proper implementation and use of PAM controls. Provide Tier 3 support for the CyberArk platform.
• Documentation and Training: Create and maintain comprehensive documentation for the CyberArk architecture, configurations, and operational procedures. Provide training to end-users and support staff.
• Stay Current: Stay up-to-date with the latest CyberArk features, PAM strategies, and emerging security threats to continuously enhance the organization's security posture.

Work Environment and Physical Demands:

• This is primarily a Telework position with a requirement to be onsite up to two (2) days a week.
• If alternate worksite is other than DCSA facilities or corporate office space, must have the reliable ability to communicate over voice (cell phone preferred) and stable, capable internet connection.
• Must be able to communicate complex technical ideas to a diverse customer base both verbally and in written form.