CyberArk Security Engineer

Base One Technologies; Arlington, Northern (VA, KY); Hybrid; USD 100,000 - 160,000; Full time

Job summary

Base One Technologies is seeking an experienced CyberArk Administrator to manage, implement, and upgrade CyberArk solutions across large environments. You will administer privileged accounts on Windows and UNIX systems, integrate platforms, and create safes and owners while ensuring CPM/PSM policy alignment.

The role involves health monitoring, testing new product versions, and driving automation opportunities in a hybrid-cloud setting with DHS on-duty requirements.

Qualifications

• Top Priority: Candidate must have experience with managing, implementing, and upgrading CyberArk.
• BS degree in Science, Technology, Engineering, Math or related field and 5-7 years of prior relevant experience with a focus on cybersecurity.
• Extensive knowledge of server operations and maintenance.
• Extensive experience managing enterprise networks.
• Understanding of cloud terminology, architecture, and tools.
• Experience installing, configuring, and maintaining tools such as Tanium, Nessus, Forescout, and Cyberark in a hybrid-cloud environment.
• DHS EOD on Duty (EOD) is required to support this program.

Responsibilities

• Setting up, implementing, and onboarding CyberArk.
• Deploying and implementing Privileged Identity Management using CyberArk for large scale customers.
• Implementing and managing CyberArk Suite of products.
• Administering Privileged User accounts and various Windows and UNIX accounts using CyberArk components.
• Integrating various platforms with CyberArk, such as LDAP providers, Windows/Linux servers, SaaS apps, and Cloud.
• Creating and Managing Safes, Platforms and Owners.
• Managing CPM policies or redistribution.
• Knowledge on CPM and PSM connector customization.
• Performing health check monitoring on all CyberArk servers to ensure availability.
• Testing and certifying new product versions and bug fixes, with detailed reports.
• Discovery and Auditing Scans; identifying privileged accounts.
• Identifying and developing automation opportunities.
• Creating high-quality documents.

Skills

CyberArk experience

Education

Bachelor’s degree in Computer Science, Engineering, or Cyber Security

Any CyberArk certification

Tools

Tanium

Nessus

Forescout

CyberArk

Job description

• Setting up, implementing, and onboarding CyberArk
• Deploying and implementing Privileged Identity Management using CyberArk solution for large scale customers
• Implementing and managing CyberArk Suite of products
• Administering Privileged User accounts and various Windows and UNIX accounts using CyberArk components
• Integrating various platforms with CyberArk, such as different LDAP providers, Windows servers, LINUX servers, SaaS applications, and Cloud environments
• Creating and Managing Safes, Platforms and Owners
• Managing Central Policy Manager (CPM) policies or redistribution
• Knowledge on CPM and PSM connector customization
• Performing health check monitoring on all CyberArk severs to ensure consistent availability of the system to end-user.
• Testing and certifying new product versions and bug fixes, and providing detailed reports
• Periodically performing Discovery and Auditing Scans, and identifying the privileged accounts
• Identifying and developing automation opportunities
• Creating documents of high quality

Qualifications:

• Bachelor’s degree in Computer Science, Engineering, or Cyber Security
• Experience in Cybersecurity, with at least one (1) year of work experience supporting CyberArk / Infrastructure
• Any CyberArk certification

Basic Qualifications

• Top Priority: Candidate must have experience with managing, implementing, and upgrading CyberArk.
• BS degree in Science, Technology, Engineering, Math or related field and 5-7 years of prior relevant experience with a focus on cybersecurity. Additional education, certs and experience may consider in lieu of a degree.
• Extensive knowledge of server operations and maintenance
• Extensive experience managing enterprise networks
• Understanding of cloud terminology, architecture, and tools to include installing, provisioning and monitoring.
• Experience installing, configuring, and maintaining tools such as Tanium, Nessus, Forescout, and Cyberark in a hybrid-cloud environment
• Department of Homeland Security (DHS) Entry on Duty (EOD) is required to support this program

Requirement Certifications

• CCIE Security
• Cisco Certified Network Professional (CCNP)
• CCNP Security
• CCSP – Certified Cloud Security Professional
• CEH – Certified Ethical Hacker
• Certified Data Administrator Professional
• Splunk Certified Architect
• Certified Storage Associate
• CISSP – Certified Information Systems Security
• CompTIA Advanced Security Practitioner (CASP)
• CompTIA Security+
• Converged Infrastructure Specialist
• CSSLP – Certified Secure Software Lifecycle Professional
• ECSP – EC-Council Certified Secure Programmer
• ENSA – EC-Council Network Security Administrator
• GCWN – Windows Security Administrator
• GICSP –Cyber Security Professional
• GISF – Security Fundamentals
• GSSP – Secure Software Programmer
• MCSE – Microsoft Certified Solutions Expert (Server)
• RHCA – Red Hat Certified Architect
• SEI (Software Engineering Institute)
• SSCP – Systems Security Certified Practitioner
• VCA (Certified Associate)
• VCAP (Certified Advanced Professional)
• VCDX (Certified Design Expert)
• VCIX (Implementation Expert)
• VCP (Certified Professional)
• MS 365 Certified: Security Administrator
• Microsoft Certified Azure Security Engineer (Associate)
• RHCSA – Red Hat Certified System Administrator
• Splunk Enterprise Security Certified Admin
• Splunk Core Certified Consultant
• Splunk SOAR Certified Automation Developer
• Splunk Certified Developer
• AWS Certified Solutions Architect - Associate
• The Linux Foundation Certified Kubernetes Administrator (CKA)
• The Linux Foundation Certified Kubernetes Application Developer (CKAD)
• ISACA Certified Data Privacy Solutions Engineer (CDPSE)
• ISACA Certified Information Security Manager (CISM)