Sr. CyberArk PAM Engineer Administrator IoT (BHJOB22048_733)

Sr. CyberArk PAM Engineer Administrator - Denver - ITmPowered

The CyberArk PAM Engineer Administrator will implement CyberArk Solutions across Medical Devices, IoT, and OT accounts, connections, and external vendor access. End to end deployment of CyberArk and connectivity of CyberArk components to the target Medical Devices and IoT Device platforms. Will spearhead CyberArk Plugin, Connector, and API specification, configuration, troubleshooting, and implementation.

Responsibilities:

• Integration of CyberArk PAM Solution. Implementation of CyberArk components Enterprise Password Vault, CPM, PVWA, PSM, PSMP, AIM, DAP, PTA.
• Creating CPM and PSM Plugins, safe and platform design
• CyberArk CPM plugin specifications and design for an array of Medical Devices and IoT Devices.
• Analyzing CyberArk CPM plugin and troubleshooting issues related to CPM failures across IoT Devices.
• CyberArk DNA scan design to Discover IoT and Medical accounts / devices connecting to the network and automatically onboard those credentials, manage lifecycle, vulnerability, and patch management.
• Bulk account on-boarding using passwords upload utility.
• CyberArk Automation integration with other systems - ServiceNow (Nuvolo) asset inventory ticketing systems, data lakes, and other platforms.
• Define Access Control, User Entitlements, Manage Applications Credentials and User Access Policies.
• IoT / OT Session Isolation, Monitoring and Recording: Anytime an OT environment or IoT device is accessed, enable automatic isolation, monitoring and recording.
• Patch and Manage Iot and Ot Connections: Set up interconnection with ServiceNow/Nuvolo to create tickets and priority / severity. Work with Clinical Healthcare Technology Cyber teams (and Vendors) to consistently upgrade and patch your systems.
• Perform health check monitoring on all Cyber-Ark servers to ensure availability of system to end-users
• Perform regular system audits to detect deviations from established procedures, account mapping unauthorized system activity and report findings.
• Provision Access to External Vendors: Provide continuous controlled access to systems and devices, for human and non-human users alike. Setup onboarding and provisioning for External Vendor Access.
• CyberArk support on technical issues, replicating customer issues and level 3 support.

Requirements:

• Bachelor's degree in Computer Science, Engineering, related discipline, OR 4yrs additional experience.
• 6-10 years in Systems Administration, Technology, Cybersecurity, IAM with recent CyberArk experience.
• 3-5 years CyberArk PAM administration, engineering, deployment, configuration, and troubleshooting.
• 1-2 years CyberArk Plug-in, Connectors, and API configuration, troubleshooting, customization
• CyberArk Certifications preferred: CyberArk Certified Defender, Sentry, or Guardian.
• Experience on end-to-end deployment of CyberArk components and connectivity to target platforms.
• Implementation and integration of CyberArk PAM Solution. Implementation of CyberArk components Enterprise Password Vault, CPM, PVWA, PSM, PSMP, AIM, DAP, PTA.
• Experience in designing, deployment, configuration, integration and troubleshooting CyberArk Privileged Account Security (PAS) product suite (Enterprise Password Vault, Password Vault Web Access, Central Policy Manager, Privileged Session Manager, Application Identity Manager, Privileged Threat Analytics
• Good Knowledge on Linux Red Hat 7, Windows administration, LDAP, AD, IAM and Networking concepts.
• Knowledge in Python, PowerShell.

LOGISTICS:

• Work Remote - AND - MUST live in Colorado (No relocation provided). Must be able to come into the DTC office periodically for all hands meetings.
• Must be willing to convert to an full time employee within 3-6 months. Very short contract to perm to get the person in the role while they process the perm onboarding.
• COVID-19 Vaccine Required - Must be fully vaccinated OR provide valid medical or religious exemption.
• Must be able to successfully pass a 12-panel drug screen, 10-year background check, employment verification.
• You will need to be a current US Citizen or valid Green Card holder. No need for visa now or in future.
• W2 only - No sub vendors. Sponsorship NOT available.
• Must have direct contact information on resume (phone / email) to be considered.