9th Way Insignia is a service-disabled, veteran-owned small business bringing transformative technology to our government customers so they can achieve their missions.  Our specialties include cybersecurity, cloud modernization, software development, data analytics, enterprise architecture, enterprise IT, analytics, process automation, and artificial intelligence.  Learn more about 9th Way Insignia at https://9thwayinsignia.com/.

Project Introduction

9th Way Insignia is looking for a Senior CyberArk Security Engineer to join our team supporting the Department of Transportation’s Enterprise IT Shared Services (EITSS) program. The team supports the Office of the Chief Information Officer in developing and implementing an enterprise IT infrastructure and common operating environment across DOT.

Professional Level

Senior CyberArk Security Engineer

Location

Washington, DC

Responsibilities

As a Senior CyberArk Engineer, you will play a crucial supporting role in enhancing the Department of Transportation's (DOT) cybersecurity infrastructure. Working alongside senior engineers, you'll contribute to the deployment and ongoing maintenance of a sophisticated Privileged Access Management (PAM) solution. This role engages with key stakeholders, including DHS CISA integrators, to ensure the PAM system operates flawlessly across development, testing, and production environments.

Daily responsibilities involve management of roles and safes, helping deploy software updates, and contributing to the preparation of reports that highlight the performance and security of the PAM tool. Additionally, the position identifies and mitigates security vulnerabilities while providing essential support for on-call troubleshooting and remediation efforts related to the PAM solution.

The position supports annual disaster recovery testing, aids in documenting recovery and contingency plans, and assists with operating system patching on vault appliances. This role is critical in ensuring that the PAM solution not only meets security requirements following DOT’s Change Management processes and contributing to the enhancement of reporting capabilities in line with DHS CISA requirements.

Requirements

• CyberArk Sentry Certification Required: Current Certified CyberArk Sentry credential, affirming their expertise in managing and safeguarding privileged accounts within the CyberArk platform.
• CyberArk Implementation Experience: One year of experience in designing and implementing integrated lifecycle management processes for CyberArk within an organization comparable in scale to the Department of Transportation (DOT), demonstrating a capability to support complex cybersecurity environments.
• Server Administration Expertise: Three years of server administration experience is required, with specific proficiency in managing Windows Server 2019 and Red Hat Enterprise Linux (RHEL) 8 environments. This experience should highlight a strong foundational knowledge in operating systems, indicating the candidate's ability to maintain and optimize server infrastructure for reliability and performance.

Preferred Qualifications

• Proficiency in CyberArk and SailPoint Integration: Demonstrated proficiency in seamlessly integrating CyberArk with SailPoint, showcasing the ability to unify privileged access management with comprehensive identity governance solutions, enhancing organizational security posture.
• Comprehensive Active Directory Knowledge: Extensive experience with Active Directory, encompassing both front-end aspects such as account management and Group Policy, as well as back-end complexities including AD Schema, Public Key Infrastructure (PKI), and automation via PowerShell. This depth of knowledge ensures a robust and secure identity and access management framework.
• Database Management Competence: Solid understanding of database management principles, specifically with SQL Server 2019. This includes proficiency in backups, indexing, integrity checks, installation, configuration, managing ports and protocols, creating maintenance plans, and effective troubleshooting. Additionally, skilled in data modeling and schema, with the ability to interpret and navigate Entity Relationship Diagrams, underscoring a well-rounded database administration skill set.
• CyberArk Configuration Expertise: Proven capability in configuring CyberArk to ensure secure collaboration with a diverse array of systems and devices, including networks, iDRAC interfaces, applications, cloud services, storage solutions, servers, and appliances, guaranteeing the integrity and security of privileged access across the IT ecosystem.

Note: Candidate must be a U.S. citizen or green card holder who has resided in the U.S. for at least 3 years and the ability to obtain a public trust.

9th Way Insignia’s range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Clearance/Background Investigation
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.

Benefits
Eligible employees will have access to our comprehensive benefits package which includes Medical, Dental, Vision, Voluntary Life Insurance, 401(k), Basic Life A&D, STD, LTD, PTO, Telehealth, paid holidays, FSA, HSA. Additional resources include our Employee Assistance Program (EAP) and Traveling Assistance.

Legal
We’re an equal employment opportunity employer that empowers our people to fearlessly drive change – no matter their race, color, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, age, marital status, sexual orientation, gender identity, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, or local law.