Position: CyberArk Engineer, Network and Computer Systems Administrator (US Citizens Only)

Full Background Investigation Required Prior To Start and Must Be Able to Obtain A Federal Government Public Trust Clearance

PLEASE NOTE:

Education , Technical Certifications, Employment History AND Employer References Subject to Strict Verification due to Federal Requirements

Location: Washington, DC (Remote, must live in DC metro area)

Description/Responsibilities:

Anakim Consulting is seeking a Privileged Access Management (PAM) Engineer with experience in CyberArk tools, supporting the Information Technology Service Desk and Engineering Support program for a federal government customer contract.

Anakim Consulting engineering staff provides maintenance and operational IT support that includes engineering services for systems, equipment, hardware, and software.?This engineer will design and develop solutions to complex application problems, system administration issues or CyberArk concerns, and performance systems management and integration functions. Part of our support team works onsite in Washington, DC at a government facility and candidates do need to be within local commuting distance (within 50 mile radius) to DC. Primarily, our engineers split time between telework with occasional need to work onsite in DC, or to the data center in Ashburn, VA. Remote work may also be considered for this position.

Roles and Responsibilities:

The Network and Computer Systems Administrators manage, implement, and maintain the Privilege Access Management (PAM) and Identity Management solutions using CyberArk to meet business requirements. Develop relationships across the business to understand requirements, apply technical knowledge to solve business problems and work closely with other teams to translate business requirements into technical solutions.

Required Qualifications:

To be considered for this position, you must minimally meet the knowledge, skills, and abilities listed below:

• Work on projects as an identity and privilege access management engineer, including identifying the right mix of tools and techniques to translate a client's needs and future goals into a plan that will enable secure and effective solutions.
• Apply expertise to perform discovery and analysis, architecture design, solution design, plan solution implementations, and apply best practices to mature CyberArk capabilities.
• Perform installation and configuration of required CyberArk platform components including supporting enterprise on-boarding, credential discovery, and analysis.
• Support upgrades of CyberArk, including maintenance, patch identification and publication, related modules, develop SOPs and documentation.
• Maintain responsibility for product security and audit findings, privilege user incident management support, user acceptance testing of privilege accounts, and validation testing of PRIV and integrated solutions.
• Identify requirements, design, document, and implement technical solutions for scalable and resilient network architecture.
• Ability to obtain a Public Trust Clearance

Desired Qualifications:

Other desired qualifications include:

• Experience with designing CyberArk architecture and configuration to meet SOW scope and IAM requirements.
• Ability to develop CyberArk configuration and customizations to meet SOW scope and IAM design.
• Ability to consult, support, and mentor client stakeholders for all upgrades, deployments, and production operations.
• Ability to author and maintain CyberArk IAM Architecture and Design, Configuration, Deployment, and Run Book documents and respective iterations.
• Practical experience with PKI solutions, including SSL
• Practical, "field" experience with installing, configuring, and testing PAM solutions.
• Experience integrating PAM solutions with multi-factor authenticators, namely PIV cards
• Experience deploying PAM solutions in backup, high-availability, and DR environments (cold, warm and hot)
• Experience with Windows operating systems, Microsoft Internet Information Services (IIS) and Active Directory (AD), Windows PowerShell, Windows credential stores, Microsoft Certificate Authority
• Proven ability to work closely with customer's network and operations team to resolve issues or security concerns of tools/services.
• Proven ability to work with vendors in troubleshooting and resolving issues related to identified security tools.
• Extensive experience working with clients to provide design & architectural guidance and best practice recommendations for safe design, access control policies, and other related security requirements or needs.
• Bachelor's degree and 7+ years of related technical experience with a minimum of 4 years' experience implementing and administering CyberArk in an enterprise environment.
• Relevant IAM/PRIV/PAM tool certifications, e.g. CyberArk level 3 (Sentry) or higher
• Self-starter and strategic thinker.
• Excellent oral and written communication skills and executive presence that enable effective engagement with senior stakeholders.
• Ability to work independently and communicate technical and security related issues to client/business stakeholders effectively and professionally.
• Ability to provide technical leadership to Junior Engineers on tasks and projects and communicate abstract concepts to gain support from stakeholders.

Nice to Have Qualifications:

Additional desired development qualifications include:

• Programming languages and APIs: Java, BeanShell, Python, REST, JSON, SOAP
• Experience with integrating PAM solutions like Splunk and/or IAM tools like SailPoint.
• Experience with other PRIV solutions (CA-PAM, Centrify, Oracle Identity Management, Microsoft Identity Management)
• Cloud Platform experience (AWS, Azure)

Education/Certification Required:

• 7+ years' experience in a similar role. Bachelor's degree required.
• U.S. Citizenship
• Must be able to achieve a Secret clearance/position of trust.

EOE: Anakim Consulting is an equal employment opportunity and affirmative action employer. All qualified applicants will receive consideration for employment without regards to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

This position is currently accepting applications.