CyberArk Engineer/Architect

Decisive-Point-Consulting; United States; On-site; USD 150,000 - 180,000; Full time

Job summary

Decisive Point Consulting Group is seeking an experienced CyberArk PAM Engineer to design, plan, and implement privileged access solutions across on‑premises and cloud environments. You will collaborate with cybersecurity, infrastructure, and application teams to ensure secure, scalable PAM deployments.

The role requires 8+ years with CyberArk PAM, 3+ years leading engineering efforts, and strong knowledge of SAML, MFA, LDAP, and AD environments.

Qualifications

• 8+ years implementing CyberArk PAM solutions in enterprise/client environments.
• 3+ years leading a CyberArk Engineering effort.
• Experience with PAM/IAM or security solutions (BeyondTrust, SailPoint, Ping Identity, Okta, Saviynt).
• Strong PAM principles: privileged account security, credential management, password rotation, access controls.
• Experience with enterprise/cloud authentication design and implementation.
• Active Directory administration and multi-site environments.
• Knowledge of SAML/SO and MFA integrations.
• Experience with LDAP and directory services integration.

Responsibilities

• Install, configure, and maintain CyberArk PAM in enterprise and cloud environments.
• Customize CyberArk components to meet security policies and customer needs.
• Integrate CyberArk with enterprise apps, directories, and authentication systems.
• Manage onboarding, password rotation, credential management, access controls, and privileged sessions.
• Troubleshoot CyberArk applications and supporting infrastructure.
• Support PAM deployment across on‑premises, hybrid, and cloud environments.
• Collaborate with cybersecurity, IAM, and infrastructure teams for successful integration.
• Develop and maintain technical documentation and system diagrams.
• Support system upgrades, patches, and ongoing improvements.

Skills

CyberArk PAM

PAM principles

Active Directory

SAML/SO

MFA

LDAP

password management

network & security

Education

Bachelor's degree in CS/CE/IS/CYBER

CyberArk CDE or CPC certification

Tools

BeyondTrust

SailPoint

Ping Identity

Okta

Saviynt

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

T4NG PAS Full Time US

4 days ago Requisition ID: 1382

Salary Range: $150,000.00 To $180,000.00 Annually

Support the Department of Veterans Affairs (VA) Privileged Access Management (PAM) program with design, planning and implementation of CyberArk capabilities as part of the VA PAM solution. Assist in planning and implementing next-generation PAM solutions.

Essential Functions:

• Install, configure, implement, and maintain CyberArk Privileged Access Management (PAM) solutions within enterprise and cloud environments.
• Customize and configure CyberArk components and capabilities to meet customer security requirements, operational needs, and established security policies.
• Implement and maintain integrations between CyberArk and enterprise applications, directories, authentication systems, and other security technologies.
• Configure and support privileged account onboarding, password rotation, credential management, access controls, and privileged session management.
• Troubleshoot, diagnose, and resolve technical issues involving CyberArk applications, integrations, authentication processes, and supporting infrastructure.
• Support the implementation and administration of PAM solutions across on-premises, hybrid, and cloud environments.
• Collaborate with cybersecurity, infrastructure, application development, and IAM teams to ensure successful integration and operation of privileged access solutions.
• Develop and maintain technical documentation, including installation guides, configuration procedures, integration specifications, system diagrams, and troubleshooting instructions.
• Support system upgrades, patches, maintenance activities, and ongoing improvements to CyberArk environments.

Required Experience:

• 8+ years of hands-on experience implementing, configuring, administering, or supporting CyberArk PAM solutions in enterprise or client environments.
• 3+ years of hands-on experience leading a CyberArk Engineering effort.
• Experience implementing or supporting additional PAM, IAM, or security solutions, such as BeyondTrust, SailPoint, Ping Identity, Okta, or Saviynt.
• Strong understanding of PAM principles, including privileged account security, credential management, password rotation, and access controls.
• Experience with enterprise and cloud authentication and authorization design, configuration, and implementation.
• Hands-on Active Directory administration experience, including account management, directory consolidation, and account migration.
• Experience configuring and administering Active Directory domains, trusts, and multi-site environments.
• Knowledge of LDAP administration, directory services, and integration with Active Directory.
• Experience implementing and configuring Security Assertion Markup Language (SAML) authentication and Single Sign-On (SSO) solutions.
• Experience implementing and integrating Multi-Factor Authentication (MFA) solutions.
• Knowledge of password management technologies, security policies, credential storage, and automated password management processes.
• Understanding of network infrastructure and protocols, including load balancers, firewalls, routers, switches, LANs, WANs, TCP/IP, and IP routing.
• Ability to develop clear technical documentation and communicate technical concepts to both technical and non-technical stakeholders.
• Experience working collaboratively with cybersecurity, infrastructure, and application teams to implement and support enterprise security solutions.
• Experience supporting PAM solutions within federal government or other highly regulated environments highly preferred.

Education/Certifications:

• Bachelor's degree in Computer Science, Computer Engineering, Information Systems, Cybersecurity, or a related field; equivalent relevant professional experience may be considered in lieu of a degree.
• CyberArk Certified Delivery Engineer (CDE) or CyberArk Certified Privilege Cloud Engineer (CPC) certification required. Additional CyberArk certifications preferred.

DPCG is an Equal Opportunity Employer committed to hiring and developing the most qualified individuals based on merit, experience, and business needs, without regard to any protected status under applicable law.