CyberArk PAM Engineer: Elevate Privileged Access Security

CognoStrategy, LLC; Washington (District of Columbia); On-site; USD 120,000 - 160,000; Full time

Job summary

CognoStrategy, LLC is seeking a security-focused engineer to support the DOT's cybersecurity infrastructure, focusing on Privileged Access Management (PAM) deployment and ongoing maintenance. You will work with senior engineers and DHS CISA integrators to ensure PAM runs smoothly across development, testing, and production environments.

Daily tasks include managing roles and safes, software updates, disaster recovery planning, and on-call remediation.

Qualifications

• Minimum 5 years in business solutions engineering support with design, proof of concept and documentation.
• Bachelor's degree preferred with IT/Cybersecurity IAM/PAM experience.
• Strong Windows/Linux knowledge and networking in IT/DevOps.
• CyberArk Sentry certification and CyberArk implementation experience preferred.
• Experience with AD/LDAP, cloud (AWS/Azure/GCP), SIEM/logging, and REST API.

Responsibilities

• Assist and identify technology solutions to meet enterprise requirements.
• Conduct PoCs, pilots and demos; evaluate and document tradeoffs.
• Provide written analyses with rationale and recommendations.
• Support on-call remediation and vulnerability mitigation for PAM.
• Participate in change management and reporting enhancements under DHS CISA.

Skills

CyberArk

SailPoint

Windows

Linux

PowerShell

REST API

AD/LDAP

Cloud IAM

Education

Bachelor's Degree preferred in IT/Cybersecurity

Tools

CyberArk

SailPoint

Active Directory

SQL Server 2019

Windows Server 2019

RHEL 8

Job description

CognoStrategy, LLC is seeking a security-focused engineer to support the DOT's cybersecurity infrastructure, focusing on Privileged Access Management (PAM) deployment and ongoing maintenance. You will work with senior engineers and DHS CISA integrators to ensure PAM runs smoothly across development, testing, and production environments.

Daily tasks include managing roles and safes, software updates, disaster recovery planning, and on-call remediation.