[Hiring] IAM CyberArk Architect @qbytelabs

Role Description

Hands on CyberArk Architect with a deep understanding of the platform. Does not need to be heavy in documentation and strategy, as our client currently has everything documented. Someone who is forward-thinking and can recommend process improvements and updates. Security engineering background is extremely important. Must know scripting languages, not specific on which ones.

IAM CyberArk Architect responsible for designing, implementing, and managing security technology solutions on a global scale.

What You'll Do:

• Hands-on experience required, not just focused on strategy.
• Technical design, implementation, enhancement, and ongoing support for security technologies (30%).
• AppSec reviews, penetration testing, and red teaming activities to identify gaps and weaknesses; utilize red team learnings to improve detection capabilities and response automation (20%).
• Process automation and orchestration for improving team efficiency, documentation, and training (20%).
• Execute and continually improve core security processes such as vulnerability management, threat analysis, security monitoring, incident response, identity, and access management (10%).
• Data analytics and KPI reporting for ensuring operational effectiveness and controls health (10%).
• Collect, process, preserve, analyze, and present evidence in support of breaches, vulnerability mitigation, and/or criminal, fraud, counterintelligence, or law enforcement investigations (10%).

Qualifications

• Bachelor's Degree with IT field of study preferred.
• 5+ years of relevant work experience.

Requirements

• Design and implement just-in-time privilege elevation, accessibility, application, and least privilege workflows using CyberArk, Microsoft PIM/PAM, and other similar technologies.
• Monitor and regulate access to cloud entitlements and continuously identify and remediate security risks related to excessive privileges and policy violations.
• Lead or contribute as a technical resource in multi-discipline IT security projects to enhance privileged access management infrastructure and procedures.
• Improve core processes in privileged access management, threat hunting and analysis, vulnerability management, security monitoring, and incident response for both on-premises and cloud environments.