Security Engineer

Meet the Team   The CyberArk CorePAS (Core Privileged Access Security) team is a full life-cycle solution for managing privileged accounts, SSH keys and Shared Safes in a secure repository for the Cisco enterprise. It enables organizations to secure, provision, manage, control, and monitor all activities associated with all types of privileged identities while maintaining and providing tamper-proof audit records. CorePAS also provides secure isolation and jumping capabilities to downstream targets such as Windows and Linux Servers, Network IOS devices, and Cloud SaaS Applications while protecting privileged accounts, secures individual identities, infrastructure, asset management, intellectual property, and "Branding".

The role for this Security Engineer for CorePAS is: Infrastructure Management: Oversee the installation, configuration, and maintenance of the CyberArk PAS suite (Vault, PVWA, CPM, PSM, PSMP, and CCP) across multiple versions. Automation & Integration: Develop custom plugins and automation scripts to enhance PAM capabilities. Integrate CyberArk with diverse platforms, including AD, databases, and third-party applications. Operational Excellence: Lead regular operational activities, including Disaster Recovery (DR) drills, health checks, and security audits. Perform DNA scans to discover and onboard privileged accounts. Process & Documentation: Create and maintain comprehensive Standard Operating Procedures (SOPs) and technical documentation. Ensure all processes meet strict Service Level Agreements (SLAs). Leadership & Mentoring: Provide technical guidance and training to team members. Act as a primary point of contact for client communication regarding security requirements and project proposals. Security Compliance: Apply deep knowledge of PKI tools, authentication protocols, and data privacy concepts to maintain a secure environment.

Experience: 5+ years of dedicated experience in CyberArk administration and Privileged Account Management. Technical Proficiency: Expert-level knowledge of CyberArk PAS (up to version 14.6). Strong background in scripting (Java, SQL, Shell) to support custom plugin development.

Bachelor’s degree in Computer Science, Engineering, or a related field. Certifications: Professional certification in CyberArk PAS. Soft Skills: Proven ability to lead small teams, manage client expectations, and present complex technical proposals effectively.

Experience with MS PKI tools and certificate lifecycle management. Strong background in Data Loss Prevention (DLP) and endpoint security solutions. Demonstrated history of successful large-scale migrations and system upgrades. #WeAreCisco where every individual brings their unique skills and perspectives together to pursue our purpose of powering an inclusive future for all.  Our passion is connection—we celebrate our employees’ diverse set of backgrounds and focus on unlocking potential. Cisconians often experience one company, many careers where learning and development are encouraged and supported at every stage. Our technology, tools, and culture pioneered hybrid work trends, allowing all to not only give their best, but be their best.  We understand our outstanding opportunity to bring communities together and at the heart of that is our people. One-third of Cisconians collaborate in our 30 employee resource organizations, called Inclusive Communities, to connect, foster belonging, learn to be informed allies, and make a difference. Dedicated paid time off to volunteer—80 hours each year—allows us to give back to causes we are passionate about, and nearly 86% do!  Our purpose, driven by our people, is what makes us the worldwide leader in technology that powers the internet. Helping our customers reimagine their applications, secure their enterprise, transform their infrastructure, and meet their sustainability goals is what we do best. We