CyberArk Security Specialist

An employer is seeking a CyberArk Security Specialist for a large financial client sitting in Charlotte, NC. This person will support the organization's migration from on-premises CyberArk to CyberArk's SaaS solution. This role will be responsible for managing privileged access controls, implementing security best practices, and ensuring seamless transition to cloud-based identity access management.

CyberArk Migration & Management
• Lead the migration effort from on-premises CyberArk PAM solution to CyberArk's SaaS platform
• Design and implement privileged access workflows and policies in the new SaaS environment
• Configure and manage CyberArk components including Password Vault Web Access (PVWA) and Central Policy Manager (CPM)
• Create and maintain documentation for CyberArk administration and end-user procedures
• Collaborate with technology teams to facilitate applications on-boarding to the SaaS solution

Active Directory Management
• Provision, modify, and deprovision user accounts in Active Directory
• Implement and manage AD group policies and security settings
• Configure and maintain AD organizational units, groups, and delegation models
• Troubleshoot authentication issues and directory synchronization problems

Unix System Administration
• Provision and manage user accounts on Unix/Linux systems
• Implement security controls and access policies for Unix environments
• Integrate Unix systems with centralized identity management platforms

General Access Management
• Create and maintain access management policies and procedures
• Respond to access-related security incidents
• Collaborate with security, IT, and business teams on access requirements

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

• 3+ years of experience with privileged access management tools, preferably CyberArk
• Demonstrated experience with CyberArk migrations or significant version upgrades
• Strong working knowledge of Active Directory administration and group policy management
• Understanding of identity and access management principles and best practices
• Experience implementing least privilege access models

• CyberArk Trustee certification
• Microsoft certified (MCSA/MCSE)
• CISSP, CISM, or other security certifications
• Hands-on experience with Unix/Linux user provisioning and access control
• Experience with identity governance and administration (IGA) platforms
• Scripting abilities in PowerShell, Python, or Bash
• Experience with DevOps and automation tools

Benefit packages for this role will start on the 1st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.