CyberArk Engineer/Architect

Decisive Point Consulting Group; Idaho; On-site; USD 150,000 - 180,000; Full time

Job summary

Decisive Point Consulting Group in Idaho (US) seeks an experienced CyberArk PAM Engineer to design, plan, and implement Privileged Access Management for the VA PAM program and other enterprise environments.

Requirements include 8+ years with CyberArk, 3+ years leading a CyberArk engineering effort, and experience with IAM, SAML, MFA, AD, LDAP, and cloud integrations. Federal/regulated environment experience preferred.

Qualifications

• 8+ years hands-on experience implementing, configuring, administering, or supporting CyberArk PAM solutions in enterprise or client environments.
• 3+ years leading a CyberArk Engineering effort.
• Experience with additional PAM/IAM/security solutions such as BeyondTrust, SailPoint, Ping Identity, Okta, or Saviynt.

Responsibilities

• Install, configure, implement, and maintain CyberArk PAM solutions in enterprise and cloud environments.
• Customize CyberArk components to meet security policies and customer requirements.
• Implement and maintain integrations between CyberArk and enterprise apps, directories, and authentication systems.
• Configure privileged account onboarding, password rotation, credential management, access controls, and privileged session management.
• Troubleshoot CyberArk applications, integrations, and supporting infrastructure.
• Support PAM solutions across on-premises, hybrid, and cloud environments.
• Collaborate with cybersecurity, infrastructure, app development, and IAM teams.
• Develop and maintain technical documentation (install guides, configuration procedures, diagrams).
• Support system upgrades, patches, and ongoing improvements to CyberArk environments.

Skills

CyberArk PAM

Active Directory

LDAP

SAML SSO

MFA

Cloud integration

Documentation

Education

Bachelor's degree in CS/Engineering/Info Systems

CyberArk CPC/CDE certification

Tools

CyberArk

BeyondTrust

SailPoint

Okta

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

T4NG PAS Full Time US

Salary Range: $150,000.00 To $180,000.00 Annually

Support the Department of Veterans Affairs (VA) Privileged Access Management (PAM) program with design, planning and implementation of CyberArk capabilities as part of the VA PAM solution. Assist in planning and implementing next-generation PAM solutions.

Essential Functions:

• Install, configure, implement, and maintain CyberArk Privileged Access Management (PAM) solutions within enterprise and cloud environments.
• Customize and configure CyberArk components and capabilities to meet customer security requirements, operational needs, and established security policies.
• Implement and maintain integrations between CyberArk and enterprise applications, directories, authentication systems, and other security technologies.
• Configure and support privileged account onboarding, password rotation, credential management, access controls, and privileged session management.
• Troubleshoot, diagnose, and resolve technical issues involving CyberArk applications, integrations, authentication processes, and supporting infrastructure.
• Support the implementation and administration of PAM solutions across on-premises, hybrid, and cloud environments.
• Collaborate with cybersecurity, infrastructure, application development, and IAM teams to ensure successful integration and operation of privileged access solutions.
• Develop and maintain technical documentation, including installation guides, configuration procedures, integration specifications, system diagrams, and troubleshooting instructions.
• Support system upgrades, patches, maintenance activities, and ongoing improvements to CyberArk environments.

Required Experience:

• 8+ years of hands-on experience implementing, configuring, administering, or supporting CyberArk PAM solutions in enterprise or client environments.
• 3+ years of hands-on experience leading a CyberArk Engineering effort.
• Experience implementing or supporting additional PAM, IAM, or security solutions, such as BeyondTrust, SailPoint, Ping Identity, Okta, or Saviynt.
• Strong understanding of PAM principles, including privileged account security, credential management, password rotation, and access controls.
• Experience with enterprise and cloud authentication and authorization design, configuration, and implementation.
• Hands-on Active Directory administration experience, including account management, directory consolidation, and account migration.
• Experience configuring and administering Active Directory domains, trusts, and multi-site environments.
• Knowledge of LDAP administration, directory services, and integration with Active Directory.
<
• Experience implementing and configuring Security Assertion Markup Language (SAML) authentication and Single Sign-On (SSO) solutions.
• Experience implementing and integrating Multi-Factor Authentication (MFA) solutions.
<
• Knowledge of password management technologies, security policies, credential storage, and automated password management processes.
• Understanding of network infrastructure and protocols, including load balancers, firewalls, routers, switches, LANs, WANs, TCP/IP, and IP routing.
• Ability to develop clear technical documentation and communicate technical concepts to both technical and non-technical stakeholders.
• Experience working collaboratively with cybersecurity, infrastructure, and application teams to implement and support enterprise security solutions.
• Experience supporting PAM solutions within federal government or other highly regulated environments highly preferred.

Education/Certifications:

• Bachelor's degree in Computer Science, Computer Engineering, Information Systems, Cybersecurity, or a related field; equivalent relevant professional experience may be considered in lieu of a degree.
• CyberArk Certified Delivery Engineer (CDE) or CyberArk Certified Privilege Cloud Engineer (CPC) certification required. Additional CyberArk certifications preferred.

DPCG is an Equal Opportunity Employer committed to hiring and developing the most qualified individuals based on merit, experience, and business needs, without regard to any protected status under applicable law.