{"id":1550513,"url":"https://alion.io/job/strategic-staffing-solutions-cyberark-endpoint-security-engineer","title":"CyberArk & Endpoint Security Engineer","company":{"id":2027987,"name":"Strategic Staffing Solutions","domain":"strategicstaff.com","url":"https://alion.io/company/strategicstaff","size_band":"5000+","is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":"Schema","truth_index":{"grade":"B","score":82,"open_postings":11,"ghost_share":0,"stale_share":0.909,"repost_share":0,"time_to_fill_p50_days":21,"computed_at":"2026-10-19T05:45:15Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"contractor","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Lutz, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":79000,"max_usd":153000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":425},"experience_years_min":3,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Amazon S3","optional":false},{"name":"Azure","optional":false},{"name":"CyberArk","optional":false},{"name":"IAM","optional":false},{"name":"LDAP","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"ServiceNow","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Windows","optional":false},{"name":"Sentry","optional":true}],"status":"live","first_seen_at":"2026-07-17T00:00:00Z","employer_posted_date":"2026-07-17","last_verified_at":"2026-10-19T14:32:46Z","board_verified":true,"closed_at":null,"days_open":94,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":94},"description":"STRATEGIC STAFFING SOLUTIONS HAS AN OPENING!\nThis is a Contract Opportunity with our company that MUST be worked on a W2 Only. No C2C eligibility for this position. Visa Sponsorship is Available! The details are below.\n“Beware of scams. S3 never asks for money during its onboarding process.”\nWe are seeking a CyberArk & Endpoint Security Engineer to design, implement, and maintain our enterprise identity and endpoint security platforms. In this role, you will lead the deployment and management of CyberArk PAM (Privileged Access Management) and CyberArk EPM (Endpoint Privilege Manager). Your primary goal will be to enforce the principle of least privilege, eliminate standing local administrator rights across thousands of workstations, and secure high-value infrastructure credentials.\nCore Responsibilities\n Platform Administration: Manage the health, configuration, and scaling of CyberArk PAM (Privilege Cloud or Self-Hosted) and CyberArk EPM environments.\nLeast Privilege Enforcement: Design, test, and implement EPM application control policies to remove local admin rights from Windows and macOS endpoints without disrupting business operations.\n Credential Management: Configure automated password rotation, verification, and session monitoring policies via CyberArk Central Policy Manager (CPM) and Privileged Session Manager (PSM).\nAgent Deployment: Partner with Desktop Engineering teams to package and distribute the CyberArk EPM agent globally using tools like Microsoft Intune and Jamf.\n Policy Optimization: Analyze EPM discovery logs to create just-in-time (JIT) privilege elevation rules and trusted application definitions for standard users.\nIntegration & Automation: Develop PowerShell or Python scripts using CyberArk REST APIs to automate account onboarding and integrate workflows with ServiceNow.\nIncident Support: Act as the Tier 3 escalation point for troubleshooting credential rotation failures, agent communication issues, and application elevation blocks.\nRequired Technical Skills & Qualifications\nCyberArk Expertise: Minimum 3+ years of hands-on experience managing CyberArk PAM and EPM policy structures.\n Operating Systems: Deep technical knowledge of Windows OS architecture (UAC, Registry, Local Groups) and macOS security frameworks.\n Directory Services: Strong understanding of Active Directory, Azure AD/Entra ID, Group Policy Objects (GPOs), and LDAP.\nEndpoint Management Tools: Proven experience deploying software and configuration profiles via Microsoft Intune, SCCM, or Jamf.\nScripting: Proficiency in PowerShell, Bash, or Python for task automation and API integration.\n Security Fundamentals: Solid grasp of enterprise network architecture, TLS/SSL certificates, SIEM integrations (e.g., Splunk), and modern IAM concepts (SAML, OIDC, MFA).\nPreferred Qualifications\n Certifications: CyberArk Certified Defender, Sentry, or CDE (CyberArk Delivery Engineer). CISSP or CompTIA Security+ is a plus.\n Experience: Prior experience executing a successful global rollout of EPM or similar application whitelisting solutions.","description_format":"text","description_chars":3067,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Vulnerability Management","IT Consulting & Digital Transformation","Recruiting & Staffing"],"lifecycle":[{"event":"open","at":"2026-10-01T00:04:03Z"}],"visa":[],"liveness":{"score":4,"band":"cold","label":"Long shot","p_open":1,"p_active":0.145,"p_room":0.28,"age_days":94,"expected_fill_days":21,"reasons":["conf:3","agency","stale_co","urgency","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-19T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/strategic-staffing-solutions-cyberark-endpoint-security-engineer","json_url":"https://alion.io/job/strategic-staffing-solutions-cyberark-endpoint-security-engineer.json","meta":{"generated_at":"2026-10-19T14:44:32Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10807,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-20T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2027987},"rest":"https://alion.io/mcp/rest/get_company?id=2027987"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fstrategic-staffing-solutions-cyberark-endpoint-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fstrategic-staffing-solutions-cyberark-endpoint-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fstrategic-staffing-solutions-cyberark-endpoint-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/strategic-staffing-solutions-cyberark-endpoint-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fstrategic-staffing-solutions-cyberark-endpoint-security-engineer"}]}