CyberArk SME / DevOps Engineer

Capital Technology Group is seeking a CyberArk Subject Matter Expert / DevOps Engineer to implement and support secure, scalable technical solutions for federal modernization initiatives. The role focuses on CyberArk privileged access management, automation, troubleshooting, and infrastructure maintenance.

Responsibilities:

• Serve as the subject matter expert for CyberArk implementation, configuration, and administration
• Advise on and implement best practices for credential vaulting, privileged session management, and credential rotation
• Onboard privileged accounts, safes, and platforms, and manage access policies
• Support DevOps activities related to privileged access tooling, automation, and secrets management
• Automate CyberArk tasks and integrations using REST APIs and scripting
• Troubleshoot and resolve user issues with CyberArk access and components
• Maintain CyberArk infrastructure through upgrades, patching, and health monitoring
• Document configurations, procedures, and recurring issues and resolutions

Requirements:

• applicants MUST BE US Citizens and be able to obtain Public Trust clearance
• A hands-on engineer with experience implementing and administering CyberArk privileged access management (PAM) solutions
• Strong troubleshooting skills across CyberArk components, Windows and Linux systems, Active Directory, and automation pipelines
• Organized and customer-focused with strong documentation and communication skills
• 2+ years of hands-on experience implementing and administering CyberArk PAM (Vault, PVWA, CPM, PSM/PSMP)
• Experience configuring credential rotation, session recording and monitoring, and safe and account onboarding
• Scripting experience with PowerShell and/or Python, including use of the CyberArk REST API
• Experience with CI/CD tools such as Jenkins, GitLab CI, or Azure DevOps
• Familiarity with Active Directory/LDAP, Windows Server, and Linux environments
• Strong troubleshooting and problem-solving skills
• CyberArk certifications (Defender, Sentry, or Guardian)
• Experience with CyberArk Conjur, Secrets Manager, or Privilege Cloud
• Infrastructure-as-code or configuration management experience (Terraform, Ansible)
• Cloud experience (AWS or Azure)
• Experience supporting federal environments
• Active Public Trust or security clearance