CyberArk Security Engineer

Astreon Technologies is seeking an experienced CyberArk Security Engineer. The role focuses on securing and managing privileged accounts through the CyberArk PAM platform, including account onboarding, password management, privileged session monitoring, integrations, troubleshooting, automation, documentation, and compliance support.

Responsibilities:

• Manage and support the organization's CyberArk PAM/PAS environment
• Onboard administrator and other privileged accounts into CyberArk
• Create and manage CyberArk Safes and permissions
• Configure password policies, password rotation, and reconciliation
• Manage CyberArk components including PVWA, CPM, PSM, and Vault
• Configure and monitor privileged user sessions through PSM
• Manage user access using RBAC and least-privilege principles
• Integrate CyberArk with Active Directory, LDAP, SSO, and MFA
• Troubleshoot CyberArk authentication, access, password, and connectivity issues
• Support integration of CyberArk with SIEM and security monitoring tools
• Help identify and resolve privileged-access security issues
• Support CyberArk upgrades, patches, and configuration changes
• Automate CyberArk tasks using PowerShell, Python, or REST APIs
• Work with IAM, cybersecurity, infrastructure, application, and cloud teams
• Create and maintain CyberArk security documentation and procedures
• Support security audits and compliance requirements related to privileged access

Requirements:

• • 8+ years of hands-on CyberArk experience
• • Strong experience with CyberArk PAM/PAS
• • PVWA
• • CPM
• • PSM
• • CyberArk Vault
• • Experience onboarding privileged accounts
• • Experience with Safes, permissions, and access policies
• • Experience with password rotation and reconciliation
• • Experience with privileged session management
• • Good understanding of IAM, RBAC, PAM, and least privilege
• • Experience with Active Directory
• • Knowledge of Windows and Linux environments
• • Understanding of MFA, SSO, and authentication
• • Strong troubleshooting and problem-solving skills
• • CyberArk Defender or Sentry certification
• • Experience with CyberArk Conjur / Secrets Management
• • Experience with Azure or AWS
• • Experience with Splunk, Microsoft Sentinel, or other SIEM tools
• • Experience with PowerShell, Python, or REST APIs
• • Experience with CyberArk upgrades and migrations
• • Knowledge of security standards and compliance requirements