CyberArk Systems Engineer

Req : RQ210171

Type of Requisition: Regular

Clearance Level Must Be Able to Obtain: None

Public Trust/Other

Required:

NACI (T1)

Job Family: IT Infrastructure and Operations

Skills:

Cyber Ark,Cyber Ark Privileged Access Management,Oracle Identity and Access Management (IAM) Operations,Remote Desktop Protocol (RDP)

Experience:

5 + years of related experience

As a Cyber Ark Systems Engineer
, you will support the Hosting Services and Identity and Access Management, Domain Name Services, Network at the OIT’s Division of Infrastructure Services (DIS) at Health Resources and Services Administration (HRSA).

The Cyber Ark Systems Engineer will be performing installations, upgrades, monitoring, maintenance, troubleshooting, patching, securing and repair of Cyber Ark servers. The right candidate will work well with a team, always exhibit excellent customer service skills and be self-motivated seeking ways to improve the environment.

• Provide system requirements for Cyber Ark production implementation.

• Deploy, configure, and implement Cyber Ark components.

• Design and implement Privileged Identity Management (PIM) solutions using Cyber Ark to secure privileged access to critical systems.

• Integrate Cyber Ark with Active Directory for automated management of privileged AD accounts.

• Develop advanced Power Shell scripts to automate Cyber Ark administrative tasks, including account provisioning, de-provisioning, vault management, and policy enforcement.

• Configure and manage PIM policies within Cyber Ark to automate the management of privileged accounts, ensuring compliance with security standards

• Integration of RSA Secured  native Radius authentication with Cyber Ark.

• Setup of Privileged Cloud Connector Components

• Fix and troubleshoot failed verified Accounts and failed password change errors.

• Manage Active Directory user and group privileges through Cyber Ark

• Deploying and managing EPM on endpoint machine.

• Troubleshooting PSM connection issues and HTML5 Gateway issues.

• Manage new domain controller hosts with Cyber Ark environments.

• Support customer to build robust and secure IAM environments.

• Integration of Cyber Ark with Service Now Ticketing system.

• As part of a24/7 on-call rotation (approx once every 2 months), perform the activities associated with the management of dedicated ticket queues to include prioritization of work and assignment to technical resources for resolution of end user concerns

WHAT YOU'LL NEED TO SUCCEED

• Bachelor's degree in IT related field

• 5+ years of Cyber Ark experience

• Experience with installing, upgrading and troubleshooting Cyber Ark components such as PSM, PSMP, PVWA, CPM, SCIM, Cyber Ark vault

• Hands-on Cyber Ark upgrade or migration experience

• Experience with Cyber Ark setup for RDP and SSH sessions

• Require Cyber Ark related firewall/network configuration knowledge

• Be able to troubleshoot Cyber Ark related issues looking at Cyber Ark and/or network/firewall logs (we are not looking for network expert but the engineer must be experienced to look at logs from Cyber Ark/Splunk/Network to isolate Cyber Ark)

• Hands-on experience with configuring and troubleshooting Cyber Ark auto discovery for domain joined computer/server accounts

• Experience with certificate management for all Cyber Ark components

• Knowledge about configuration of VIPs for Cyber Ark PVWA/PSM/PSMP servers

• Expertise in troubleshooting Cyber Ark related issues such user failed account reconciliation, failed verification for both Linux and Windows targets including network related issues with Cyber Ark.

• Experience with Cyber Ark environment across muti-domain Active Directory

• Hands-on RHEL Linux experience to manage PSMP servers

• Effective and proactive communication with users and management on Cyber Ark related matters

• Hands-on expertise with RHEL 8.x/9.x

• Good understanding of Active Directory

• Power Shell scripting: 2+ years of experience

• Work on Service Now tickets

• Experience with detailed technical implementation documents and SOPs

• Infoblox DNS – 2+ years

• Hands on experience with Active Directory – 2+ years

• share your desire to drive operations forward.

LOCATION:
Remote . Candidates in the…