CyberArk Engineer Senior

Science Applications International Corp.; Washington (District of Columbia); On-site; USD 150,000 - 190,000; Full time

Job summary

SAIC is seeking a CyberArk Engineer Senior to support Department of Transportation initiatives. The role focuses on ILM/MUR integration with SailPoint, ServiceNow, and DOT processes to maintain ILM across development, testing, and production environments.

Responsibilities include PAM tool workflows, AD integrations, CDM dashboard support, and on-call availability. Strong design, evaluation, and documentation skills are essential to drive secure privileged access management at scale.

Qualifications

• 8+ years of related experience delivering engineering solutions
• Maps functional requirements to technical solutions across enterprise environments
• Produces written analysis and recommendation papers with clear rationale

Responsibilities

• Support ILM workflows for PAM tools and AD integrations
• Deploy software updates and report on SailPoint IdentityIQ operations
• Provide on-call support and participate in Disaster Recovery testing

Skills

PAM design

Requirements analysis

POC/evaluation

Technical documentation

Security controls

Education

Bachelor's degree in IT or related field

Tools

CyberArk Privileged Access Security

Active Directory

PowerShell

SailPoint

SQL Server 2019

Job description

SAIC is currently seeking a CyberArk Engineer Senior to support DOT. As a CyberArk Senior Systems Engineer, you'll play a key role in enhancing our cybersecurity and identity management capabilities. You'll coordinate with external stakeholders, including DHS CISA integrators, to implement the Identity Lifecycle Management (ILM)/Mandatory User Re-Authentication (MUR) solutions at the Department of Transportation (DOT). This involves integrating DOT's SailPoint infrastructure with the ServiceNow environment and maintaining the ILM solution across development, testing, and production environments.

Your responsibilities will also include:

• Supporting ILM workflows for Privileged Account Management (PAM) tools and Active Directory (AD), building new system connections, and maintaining Continuous Diagnostics and Mitigation (CDM) Dashboard integrations.
• You'll be responsible for deploying software updates, reporting on SailPoint IdentityIQ operations, and supporting the identification and remediation of security vulnerabilities.
• This position requires providing on-call and after-hours support, participating in annual Disaster Recovery testing, documenting recovery plans, and offering subject matter expertise to recommend and implement improvements.
• You'll ensure compliance with DOT processes for change management and enhance reporting capabilities, ensuring data integrity for CDM dashboard compliance per DHS CISA requirements.

Top Qualifications, Skills, Experience or Certifications:

• 8+ years of related experience providing business solutions engineering support, to include architectural design, engineering design, proof of concept development, pilots, analysis, results, and documentation.
• Performs day-to-day activities required to assist and identify technology solutions that meet enterprise requirements.
• Maps functional requirements into technological requirements, and identifies technologies that meet the technological requirements.
• Conducts proof of concept, pilots and demos for the purposes of evaluating the suitability of given technologies for meeting requirements.
• Evaluates the tradeoffs between competing solutions and develops quantitative driven analysis of alternatives.
• Produces written analysis of research and recommendation papers that clearly describe the process followed, alternatives considered, evaluation criteria and rationale for recommendation and need for additional work.

Job Role Specific Requirements:

• CyberArk Sentry Certification: Certified CyberArk Sentry qualification to be obtained within 1 year of start of employment, demonstrating advanced knowledge and skills in managing the CyberArk Privileged Access Security Solution. SAIC will carry the cost of the exam to be certified.
• Proven CyberArk Implementation Expertise: Three years of experience in designing and implementing comprehensive lifecycle management processes for CyberArk within an organization comparable to the Department of Transportation (DOT), showcasing a deep understanding of privileged access management solutions.
• Extensive Server Administration Experience: Five years of server administration experience, including proficiency with Windows Server 2019 and Red Hat Enterprise Linux (RHEL) 8, indicating a strong foundation in managing and maintaining critical server infrastructure.
• CyberArk Design Architect Proficiency: Three years of dedicated CyberArk experience in a design architect role, encompassing disaster recovery planning, ensuring high availability, and conducting system administration within a large-scale enterprise environment similar to DOT, highlighting the ability to architect robust and resilient CyberArk deployments.

Preferred skills and qualifications:

• CyberArk and SailPoint Integration Acumen: Demonstrated proficiency in integrating CyberArk with SailPoint, showcasing the capability to harmonize privileged access management with identity governance solutions for enhanced security protocols.
• Advanced Active Directory Expertise: Comprehensive knowledge of both the user interface aspects of Active Directory, such as account management and Group Policy, and the technical components, including AD Schema, Public Key Infrastructure (PKI), and automation via PowerShell, ensuring a well-rounded approach to directory services management.
• Database Management Skills: Solid foundational understanding of database management, specifically with SQL Server 2019. This includes experience with backups, indexing, integrity checks, installation and configuration, managing ports and protocols, developing maintenance plans, and adept troubleshooting. Additionally, proficient in data modeling and schema, with the ability to interpret and navigate Entity Relationship Diagrams (ERDs), indicating a comprehensive grasp of database architecture and operations.
• CyberArk Configuration Knowledge: Proven ability to configure CyberArk for secure integration with a variety of systems and devices, including networks, iDRAC interfaces, appli