CyberArk / Privileged Access Management Systems Analyst

STL 1st; Missouri; On-site; USD 90,000 - 130,000; Full time

Job summary

STL 1st seeks a hands-on Cyber Security Analyst / CyberArk Systems Analyst to administer, support, and improve the Privileged Access Management environment including PAM, EPM, and vendor remote access. The role emphasizes platform stability, compliance support, and automation of operational processes.

The candidate will manage PVWA, CPM, PSM, Safes, and onboarding of privileged accounts, while developing scripts and playbooks to streamline administration and governance across Windows and mixed

Qualifications

• 3+ years of hands-on CyberArk PAM administration experience, including PVWA, CPM, PSM, Safes, Platforms, account onboarding, credential lifecycle management, and access governance.
• Experience supporting CyberArk EPM and applying least-privilege principles in an enterprise environment.
• Strong knowledge of Active Directory, Windows Server, privileged accounts, authentication, authorization, and session management.
• Working knowledge of networking, firewalls, certificates, secure remote access, PowerShell, and infrastructure automation.
• Strong troubleshooting, documentation, and communication skills with the ability to collaborate across security, infrastructure, and application teams.

Responsibilities

• Administer CyberArk PAM, including onboarding, credentials vaulting/rotation, session monitoring, and PVWA permissions across environments.
• Create, maintain, audit, and clean up Safes, platforms, permissions, accounts, and privileged assets; onboard servers and service accounts.
• Perform health checks, upgrades, patching, vulnerability remediation, and service recovery across PVWA, CPM, PSM, and related infrastructure.
• Maintain Marketplace packages, custom platform configurations, PSM connectors, and session management capabilities.
• Administer CyberArk EPM across Windows, macOS, and endpoints, including agent deployment and lifecycle management.
• Develop least-privilege policies using role- and AD group-based targeting.

Skills

CyberArk PAM

PVWA/CPM/PSM

Safes & Accounts

Active Directory

Windows Server

PowerShell

Automation

Networking & Firewalls

Documentation & Communication

Ansible

Tools

CyberArk Alero

Ansible

Job description

We are seeking a hands-on Cyber Security Analyst /CyberArk Systems Analyst to administer, support, and improve the organization’s Privileged Access Management environment, including PAM, Endpoint Privilege Management (EPM), vendor remote access, and supporting infrastructure. The ideal candidate combines strong CyberArk expertise, troubleshooting ability, and cross-functional collaboration to maintain platform stability, strengthen privileged access controls, support compliance, and automate operational processes.

Key Responsibilities

PAM Administration & Platform Operations

• Administer CyberArk PAM, including privileged account onboarding, credential vaulting and rotation, session monitoring, access governance, and PVWA permissions across production, laboratory, and DMZ environments.
• Create, maintain, audit, and clean up Safes, platforms, permissions, accounts, and privileged assets; partner with infrastructure and application teams to onboard servers, service accounts, and administrative accounts.
• Perform health checks, upgrades, patching, vulnerability remediation, and service recovery across PVWA, CPM, PSM, and related infrastructure.
• Maintain Marketplace packages, custom platform configurations, PSM connectors, and session management capabilities.

CyberArk Endpoint Privilege Management (EPM)

• Administer CyberArk EPM across Windows, macOS, and specialized endpoints, including agent deployment, upgrades, and lifecycle management.
• Develop and optimize least-privilege policies using role- and Active Directory group-based targeting to balance security, productivity, and administrative efficiency.
• Administer CyberArk Alero and supporting third-party remote access infrastructure, including account provisioning, access controls, and vendor or contractor onboarding and offboarding.
• Maintain HTML5 Gateway services, SSL certificates, and associated containerized components to ensure reliable access.

Troubleshooting & Incident Resolution

• Resolve authentication, credential, session, EPM, PVWA, PSM, gateway, and remote access incidents using system, application, network, and Event Viewer logs.
• Collaborate with infrastructure, networking, and security teams during outages, connectivity issues, and security investigations.

Security, Compliance & Reporting

• Support audits, access reviews, compliance reporting, and operational metrics while ensuring alignment with least-privilege principles and organizational standards.
• Identify improvements to privileged access governance, monitoring, reliability, and operational efficiency.

Automation & Documentation

• Develop PowerShell scripts, automation workflows, and Ansible playbooks to streamline CyberArk administration.
• Maintain architecture documentation, procedures, configuration records, onboarding guides, runbooks, and troubleshooting resources; contribute to technical training and knowledge sharing.

Strategic & Cross-Functional Collaboration

• Partner with security, infrastructure, application, and development teams to mature privileged access, credential management, secrets handling, and application security practices.
• Evaluate additional CyberArk capabilities across cloud, secrets management, and application access.

Required Qualifications

• 3+ years of hands-on CyberArk PAM administration experience, including PVWA, CPM, PSM, Safes, Platforms, account onboarding, credential lifecycle management, and access governance.
• Experience supporting CyberArk EPM and applying least-privilege principles in an enterprise environment.
• Strong knowledge of Active Directory, Windows Server, privileged accounts, authentication, authorization, and session management.
• Working knowledge of networking, firewalls, certificates, secure remote access, PowerShell, and infrastructure automation.
• Strong troubleshooting, documentation, and communication skills with the ability to collaborate across security, infrastructure, and application teams.

Preferred Qualifications

• Experience with CyberArk Alero, Linux/Unix, Ansible, containers, or similar technologies.
• Exposure to CyberArk Secrets Management or Conjur, cloud platforms such as Azure, AWS, or GCP, and DevOps, CI/CD, or application security practices.