Security Engineer

RulesIQ; Lutz (FL); Hybrid; USD 110,000 - 160,000; Full time

Job summary

RulesIQ is seeking a CyberArk & Endpoint Security Engineer to design, implement, and maintain our enterprise identity and endpoint security platforms. You will lead the deployment and management of CyberArk PAM and CyberArk EPM, enforcing least privilege and eliminating standing local admin rights across thousands of workstations to secure high-value infrastructure credentials.

Responsibilities include platform administration, EPM policy design, credential management via CPM/PSM, agent

Qualifications

• 3+ years hands-on CyberArk PAM and EPM experience.
• Deep knowledge of Windows OS (UAC, Registry, Local Groups) and macOS security.
• Strong AD/Azure AD/Entra ID, GPOs, and LDAP expertise.
• Experience deploying software/config profiles via Intune, SCCM, or Jamf.
• Scripting skills in PowerShell, Python, or Bash for automation.
• Security fundamentals: TLS/SSL, SIEM integrations, IAM concepts (SAML, OIDC, MFA).

Responsibilities

• Design, deploy, and maintain CyberArk PAM and EPM environments.
• Enforce least privilege by removing local admin rights across endpoints.
• Configure automated password rotation, CPM/PSM policies.
• Deploy EPM agents globally with Intune/Jamf/SCCM.
• Develop scripts for onboarding and REST API automation; integrate with ServiceNow.
• Provide Tier 3 escalation support for credential rotation failures and agent issues.

Skills

CyberArk PAM/EPM

Windows security

macOS security

AD/Azure AD/Entra ID

Intune/SCCM/Jamf

PowerShell/Python/Bash

IAM concepts (SAML, OIDC, MFA)

CyberArk REST APIs

TLS/SSL, SIEM (Splunk)

Tools

Intune

SCCM

Jamf

Job description

Role: CyberArk & Endpoint Security Engineer

Work Schedule: onsite 4 days/1 day WFH

Job Summary

We are seeking a CyberArk & Endpoint Security Engineer to design, implement, and maintain our enterprise identity and endpoint security platforms. In this role, you will lead the deployment and management of CyberArk PAM (Privileged Access Management) and CyberArk EPM (Endpoint Privilege Manager). Your primary goal will be to enforce the principle of least privilege, eliminate standing local administrator rights across thousands of workstations, and secure high-value infrastructure credentials.

Core Responsibilities

Platform Administration: Manage the health, configuration, and scaling of CyberArk PAM (Privilege Cloud or Self-Hosted) and CyberArk EPM environments.

Least Privilege Enforcement: Design, test, and implement EPM application control policies to remove local admin rights from Windows and macOS endpoints without disrupting business operations.

Credential Management: Configure automated password rotation, verification, and session monitoring policies via CyberArk Central Policy Manager (CPM) and Privileged Session Manager (PSM).

Agent Deployment: Partner with Desktop Engineering teams to package and distribute the CyberArk EPM agent globally using tools like Microsoft Intune and Jamf.

Policy Optimization: Analyze EPM discovery logs to create just-in-time (JIT) privilege elevation rules and trusted application definitions for standard users.

Integration & Automation: Develop PowerShell or Python scripts using CyberArk REST APIs to automate account onboarding and integrate workflows with ServiceNow.

Incident Support: Act as the Tier 3 escalation point for troubleshooting credential rotation failures, agent communication issues, and application elevation blocks.

Required Technical Skills & Qualifications

CyberArk Expertise: Minimum 3+ years of hands-on experience managing CyberArk PAM and EPM policy structures.

Operating Systems: Deep technical knowledge of Windows OS architecture (UAC, Registry, Local Groups) and macOS security frameworks.

Directory Services: Strong understanding of Active Directory, Azure AD/Entra ID, Group Policy Objects (GPOs), and LDAP.

Endpoint Management Tools: Proven experience deploying software and configuration profiles via Microsoft Intune, SCCM, or Jamf.

Scripting: Proficiency in PowerShell, Bash, or Python for task automation and API integration.

Security Fundamentals: Solid grasp of enterprise network architecture, TLS/SSL certificates, SIEM integrations (e.g., Splunk), and modern IAM concepts (SAML, OIDC, MFA).

Preferred Qualifications

Certifications: CyberArk Certified Defender, Sentry, or CDE (CyberArk Delivery Engineer). CISSP or CompTIA Security+ is a plus.

Experience: Prior experience executing a successful global rollout of EPM or similar application whitelisting solutions.