CyberArk Systems Engineer

Type of Requisition:

Incumbent

Clearance Level Must Currently Possess:

None

Clearance Level Must Be Able to Obtain:

None

Public Trust/Other Required:

NACI (T1)

Job Family:

IT Infrastructure and Operations

Job Qualifications:

Skills:

CyberArk, CyberArk Privileged Access Management, DNS, DNS Management, Oracle Identity and Access Management (IAM) Operations

Certifications:

None

Experience:

8 + years of related experience

US Citizenship Required:

No

Job Description:

As a CyberArk Systems Engineer, you will support the Hosting Services and Identity and Access Management, Domain Name Services, Network at the OIT’s Division of Infrastructure Services (DIS) at Health Resources and Services Administration (HRSA).

The CyberArk Systems Engineer will be performing installations, upgrades, monitoring, maintenance, troubleshooting, patching, securing and repair of CyberArk servers.  The right candidate will work well with a team, always exhibit excellent customer service skills and be self-motivated seeking ways to improve the environment.

HOW YOU WILL MAKE AN IMPACT:

• Provide system requirements for CyberArk production implementation.
• Deploy, configure, and implement CyberArk components. 
• Design and implement Privileged Identity Management (PIM) solutions using CyberArk to secure privileged access to critical systems. 
• Integrate CyberArk with Active Directory for automated management of privileged AD accounts. 
• Develop advanced PowerShell scripts to automate CyberArk administrative tasks, including account provisioning, de-provisioning, vault management, and policy enforcement.
•  Configure and manage PIM policies within CyberArk to automate the management of privileged accounts, ensuring compliance with security standards 
• Integration of RSA Secured ID using native Radius authentication with CyberArk. 
• Setup of Privileged Cloud Connector Components
•  Fix and troubleshoot failed verified Accounts and failed password change errors. 
• Manage Active Directory user and group privileges through CyberArk 
• Deploying and managing EPM on endpoint machine. 
• Troubleshooting PSM connection issues and HTML5 Gateway issues.
• Manage new domain controller hosts with CyberArk environments. 
• Support customer to build robust and secure IAM environments.
• Integration of CyberArk with ServiceNow Ticketing system.
• As part of a 24/7 on-call rotation (approx once every 2 months), perform the activities associated with the management of dedicated ticket queues to include prioritization of work and assignment to technical resources for resolution of end user concerns

WHAT YOU'LL NEED TO SUCCEED

• Bachelor's degree in IT related field
• 8+ years of CyberArk experience
• Experience with installing, upgrading and troubleshooting CyberArk components such as PSM, PSMP, PVWA, CPM, SCIM, CyberArk vault
• Hands-on CyberArk upgrade or migration experience
• Experience with CyberArk setup for RDP and SSH sessions
• Require CyberArk related firewall/network configuration knowledge
• Be able to troubleshoot CyberArk related issues looking at CyberArk and/or network/firewall logs (we are not looking for network expert but the engineer must be experienced to look at logs from CyberArk/Splunk/Network to isolate CyberArk)
• Hands-on experience with configuring and troubleshooting CyberArk auto discovery for domain joined computer/server accounts
• Experience with certificate management for all CyberArk components
• Knowledge about configuration of VIPs for CyberArk PVWA/PSM/PSMP servers
• Expertise in troubleshooting CyberArk related issues such user failed account reconciliation, failed verification for both Linux and Windows targets including network related issues with CyberArk.
• Experience with CyberArk environment across muti-domain Active Directory
• Hands-on RHEL Linux experience to manage PSMP servers