{"id":3209990,"url":"https://alion.io/job/keydatacyber-cyberark-engineer-ot-critical-infrastructure-contract","title":"CyberArk Engineer -OT / Critical Infrastructure (Contract)","company":{"id":2671216,"name":"KeyData Cyber","domain":"keydatacyber.com","url":"https://alion.io/company/keydatacyber","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"senior","employment_type":"contractor","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":88000,"max_usd":166000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":6333},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"CyberArk","optional":false},{"name":"IAM","optional":false},{"name":"LDAP","optional":false},{"name":"Linux","optional":false},{"name":"NERC CIP","optional":false},{"name":"Windows Server","optional":false},{"name":"ITSM","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"Rest API","optional":true},{"name":"SIEM","optional":true}],"status":"live","first_seen_at":"2026-10-05T20:51:32Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-10-27T18:29:59Z","board_verified":true,"closed_at":null,"days_open":21,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":21},"description":"At KeyData Cyber, we’re shaping the future of identity security. Recognized by Gartner and KuppingerCole as a leading IAM professional services firm, we specialize exclusively in designing, deploying, and managing end-to-end Identity and Access Management programs for organizations across North America. With 20 years of experience, 50M+ identities managed, and 1,000+ successful deployments, our team is our strongest asset.\nProud to be recognized as a Culture 100 Award winner, KeyData Cyber is committed to building a workplace where people feel valued, supported, and empowered to grow. Our culture is rooted in collaboration, innovation, and continuous learning, creating opportunities for our people to thrive and make a meaningful impact.\nJoin an award-winning team where your ideas matter, your growth is supported, and your contributions make a difference.\nAs a CyberArk Engineer, you will be part of our Delivery Services Team, supporting the design, implementation, administration, and optimization of Privileged Access Management (PAM) solutions for clients in operational technology (OT) and regulated utility environments. You will play a critical role in securing privileged accounts, credentials, and access to critical systems while ensuring the resilience, integrity, and availability of the CyberArk platform across on-premises, segmented, and air-gapped infrastructure.\nLocation: USA, Remote\nEmployment Type: Contract, Immediate Start through March 2027\nWhat You'll Do:\nDeploy, configure, and support CyberArk PAM components, including Digital Vault, PVWA, CPM, PSM, and Disaster Recovery Vaults.\nConfigure Safes, platform onboarding, credential rotation, and reconciliation accounts across OT and enterprise environments.\nPlan and execute failover, backup/restore, and disaster recovery testing to meet resilience requirements for critical systems.\nOnboard and manage privileged accounts across Windows Server, RHEL/Linux, service accounts, SSH keys, scheduled tasks, application pools, and database platforms.\nImplement secure privileged access controls that align with NERC CIP requirements and client change management processes.\nWork in air-gapped and segmented networks, adapting deployment, patching, and support approaches to restricted connectivity.\nCollaborate with OT, infrastructure, security, and compliance teams to gather requirements and translate them into PAM designs.\nPerform upgrades, troubleshooting, and health checks, and maintain platform availability and security compliance.\nCreate technical documentation, SOPs, operational runbooks, and compliance evidence, and conduct knowledge transfer sessions.\nWho We're Looking For:\n5+ years of hands-on experience with CyberArk engineering and Privileged Access Management solutions.\nStrong experience deploying and configuring Digital Vault, CPM, PVWA, and Disaster Recovery Vaults, including failover and restore testing.\nExperience working in OT, regulated utility, or air-gapped environments.\nFamiliarity with NERC CIP controls, change management, and resilience requirements for critical infrastructure.\nHands-on experience onboarding privileged accounts across Windows Server, RHEL/Linux, SSH keys, service accounts, scheduled tasks, application pools, and databases.\nSolid knowledge of Active Directory, LDAP, network segmentation, and enterprise infrastructure.\nStrong troubleshooting, analytical, and problem-solving abilities.\nAbility to work in a team environment as well as independently.\nStrong verbal and written communication skills, with the ability to explain technical concepts to OT, IT, and compliance stakeholders.\nNice-to-Have Skills:\nCyberArk certifications such as CDE - PAM, Sentry PAM, or Defender PAM.\nOT security certifications such as GICSP, or experience with ISA/IEC 62443.\nExperience with PSM/PSMP for secure remote access into OT environments.\nExperience integrating CyberArk with MFA, SIEM, and ITSM tools.\nScripting and automation experience using PowerShell, Python, or REST APIs.\nPrevious consulting or client-facing implementation experience.\nPre-Employment Screening:\nEngagement is contingent upon successful completion of background verification, drug screening, and motor vehicle records checks, in accordance with applicable laws. #LI-RR1\nWhy You’ll Love Working Here\nAt KeyData Cyber, we put people first, valuing learning, growth, and work-life balance. We offer extensive opportunities to advance your career through leading digital identity projects across North America. Our culture is built on respect, inclusion, and equal opportunity for everyone.\nAccessibility & Accommodations\nIf you require accommodation due to a disability at any time during the recruitment and/or assessment process, please contact Talent Acquisition , and we will make all reasonable efforts to accommodate your request. \nFraud Prevention & Identity Verification\nWe may use information provided during the application process to help prevent fraud and verify identity. These checks may be conducted automatically through trusted third-party service providers as part of our standard application screening process.\nApply now to join the KeyData Cyber team and be part of our mission to secure the future of digital identity across North America.","description_format":"text","description_chars":5257,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Technology","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-24T16:08:13Z"}],"visa":[],"liveness":{"score":78,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.863,"p_room":0.9,"age_days":21,"expected_fill_days":35,"reasons":["conf:0","velocity","win:mid"],"computed_at":"2026-10-27T05:46:45Z"},"pay":null,"html_url":"https://alion.io/job/keydatacyber-cyberark-engineer-ot-critical-infrastructure-contract","json_url":"https://alion.io/job/keydatacyber-cyberark-engineer-ot-critical-infrastructure-contract.json","meta":{"generated_at":"2026-10-27T19:53:29Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10730,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2671216},"rest":"https://alion.io/mcp/rest/get_company?id=2671216"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fkeydatacyber-cyberark-engineer-ot-critical-infrastructure-contract"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fkeydatacyber-cyberark-engineer-ot-critical-infrastructure-contract"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fkeydatacyber-cyberark-engineer-ot-critical-infrastructure-contract"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/keydatacyber-cyberark-engineer-ot-critical-infrastructure-contract\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fkeydatacyber-cyberark-engineer-ot-critical-infrastructure-contract"}]}