Privileged Access Engineer
| Company | McKesson |
|---|---|
| Location | Alpharetta, GA, USA, Irving, TX, USA |
| Salary | $97700 – $162800 |
| Type | Full-Time |
| Degrees | |
| Experience Level | Mid Level |
Requirements
- 2+ years of proven engineering experience working in CyberArk suite of privileged identity management solutions.
- 2+ years of experience in administering security controls and core security principles in an organization.
- 2+ years of experience managing virtual and/or physical Windows/Linux server infrastructure.
- Strong knowledge of Windows Active Directory and Active Directory Group Policies.
- Strong knowledge of managing and supporting Windows and Linux Server Operating Systems.
- Experience with CyberArk Core mandatory.
- Experience with all or some of the following platforms: Windows, Linux, Unix, AS400, Oracle, AIX.
- Experience in scripting using PowerShell, PACLI and/or REST API.
- Experience with Secrets Management, cloud foundations, and DevOps methodologies.
- Excellent problem-solving and technical skills.
- Detail-oriented, self-motivated, and disciplined, with excellent time management skills.
Responsibilities
- Provision/ De-Provision User Access Across Multiple platforms: Windows/Linux/Unix/AS400/Oracle.
- CyberArk PIM Suite including but not limited to provisioning for; Enterprise Password Vault (Privileged Accounts at OS and DB levels), Secrets Manager Credential Provider/Central Credential Provider (App2App secrets, encryption keys, Dynamic Access Providers), Privileged Session Manager for Windows and Linux, (Control and monitor privileged accesses), Password Vault Web Access (PVWA) and DR Vault.
- Coordinate integration services, product updates and change requests.
- Ability to positively contribute and look for opportunities to improve upon existing processes, procedures, and documentation.
- Stay current with and remain knowledgeable about new trends in IAM & security fundamentals.
- Perform health check monitoring on all servers and provide timely response to address server and client-server application performance and/or availability issues.
- Identify opportunities to optimize and modernize the infrastructure.
- Identify opportunities and develop automation for engineering tasks.
- Tier 3 support for all service desks for all Privilege Access incidents and requests.
- Support the PAM global infrastructure and ability to participate in 24×7 on-call support roster.
- Support Privileged User Access Reviews and audit requests.
Preferred Qualifications
- Experience with CyberArk EPM advantageous.
- Experience within IGA tools advantageous.
- Achieved certification in Defender or Sentry (or currently working to obtain) preferred.
- Experience with API’s is desired.
- Knowledge of integration with Okta solutions i.e. Okta ASA, Okta Universal Directory & Okta Radius preferable.
- Ability to understand the business and technical requirements while developing the associated content and documentation.
- Proficiency in upgrading various software and hardware platforms.