CyberArk Engineer / Administrator

Job Description – CyberArk Engineer / Administrator

Visa :, , GREEN  CARD 

LOCATION  : Erie , PA

Role Overview

We are looking for an experienced CyberArk Engineer / Administrator responsible for the implementation, administration, maintenance, troubleshooting, upgrades, and security of CyberArk Privileged Access Management (PAM) environments. The role requires strong hands-on experience with CyberArk Digital Vault, PVWA, CPM, PSM, DR Vault, privileged account onboarding, integrations, and CyberArk version upgrades.

The candidate will be responsible for maintaining highly available and secure CyberArk environments while ensuring successful upgrades, patches, platform compatibility, backup/recovery, and post-upgrade validation.

Key Responsibilities

CyberArk PAM Administration

- Administer and support the CyberArk Digital Vault / Enterprise Password Vault (EPV) environment.

- Manage PVWA – Password Vault Web Access, CPM – Central Policy Manager, and PSM – Privileged Session Manager components.

- Administer DR Vault / Disaster Recovery environments and support Vault replication and recovery activities.

- Configure and manage CyberArk Safes, Platforms, and Policies.

- Perform privileged account onboarding, management, and lifecycle administration.

- Configure and maintain account properties, password policies, access controls, and platform settings.

- Perform password verification, password change, and password reconciliation activities.

- Troubleshoot failed password verification, change, and reconciliation operations.

- Configure and support PSM connection components/connectors for privileged session access.

- Support integrations with Active Directory, LDAP, and enterprise authentication mechanisms.

- Maintain high-availability and load-balanced CyberArk environments.

CyberArk Upgrades and Patching

- Plan and execute CyberArk version upgrades across enterprise environments.

- Perform CyberArk security patches and hotfixes in accordance with approved change procedures.

- Upgrade and maintain:

  - CyberArk Vault

  - DR Vault

  - PVWA

  - CPM

  - PSM

- Perform pre-upgrade assessments and prerequisite validation.

- Review CyberArk-supported upgrade paths and determine the appropriate upgrade sequence.

- Perform compatibility validation across CyberArk components, operating systems, databases, browsers, certificates, and integrations.

- Validate custom platforms and custom PSM connection components/connectors for upgrade compatibility.

- Review existing configurations and identify potential upgrade risks or dependencies.

- Validate certificates, configuration files, service accounts, integrations, and platform settings before upgrades.

- Develop and maintain backup and recovery plans before performing upgrades.

- Prepare rollback plans and documented recovery procedures for upgrade activities.

- Coordinate upgrade activities across multiple CyberArk components while minimizing service disruption.

- Perform post-upgrade health checks and validate CyberArk services and functionality.

- Conduct post-upgrade testing and validation for Vault, PVWA, CPM, PSM, authentication, account management, password rotation, and privileged sessions.

- Troubleshoot and remediate issues identified during or after upgrades.

Security & Operations

- Monitor CyberArk infrastructure and proactively identify operational or security issues.

- Troubleshoot Vault, PVWA, CPM, PSM, authentication, connectivity, and account-management issues.

- Ensure privileged accounts are securely stored, managed, rotated, and monitored.

- Support audit and compliance requirements related to privileged access management.

- Maintain CyberArk configuration and operational documentation.

- Follow enterprise change-management, incident-management, and security procedures.

- Work with infrastructure, Windows, Active Directory, networking, security, and application teams to resolve CyberArk-related issues.

- Participate in disaster recovery exercises and CyberArk recovery testing.

- Support production implementations and provide technical assistance during maintenance windows.

Required Technical Skills

- Hands-on experience with CyberArk PAM / PAS.

- Strong knowledge of:

  - Digital Vault / Enterprise Password Vault

  - PVWA

  - CPM

  - PSM

  - DR Vault

  - CyberArk Safes

  - Platforms and Policies

- Experience with privileged account onboarding and account lifecycle management.

- Experience with password verification, change, and reconciliation.

- Knowledge of PSM connection components/connectors.

- Experience integrating CyberArk with Active Directory and enterprise authentication.

- Experience supporting HA/load-balanced CyberArk environments.

- Strong troubleshooting skills across CyberArk components.

- Experience performing CyberArk upgrades, patches, and hotfixes.

- Knowledge of CyberArk-supported upgrade paths and version compatibility.

- Experience with pre-upgrade assessments, prerequisite checks, and compatibility validation.

- Experience validating custom platforms and connectors during upgrades.

- Knowledge of backup, recovery, and rollback procedures.

- Experience with certificate and configuration validation.

- Strong understanding of post-upgrade testing and validation.

Upgrade Responsibilities – Key Keywords

The candidate should have practical experience with:

CyberArk Version Upgrades | Security Patches | Hotfixes | Vault Upgrades | DR Vault Upgrades | PVWA Upgrades | CPM Upgrades | PSM Upgrades | Pre-Upgrade Assessment | Prerequisite Validation | Supported Upgrade Paths | Compatibility Validation | Backup & Recovery Planning | Rollback Planning | Certificate Validation | Configuration Validation | Custom Platform Compatibility | Custom Connector Compatibility | Post-Upgrade Testing | Post-Upgrade Validation

Preferred Qualifications

- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.

- CyberArk certification such as Defender, Sentry, or Trustee is preferred.

- Experience working in enterprise production environments.

- Experience with ITIL-based incident, change, and problem-management processes.

- Strong documentation, communication, and stakeholder-management skills.

Experience Level

5+ years of CyberArk/PAM experience, with strong hands-on experience in CyberArk administration and enterprise upgrades.

Core Keywords

CyberArk | PAM | PAS | Digital Vault | Enterprise Password Vault | EPV | PVWA | CPM | PSM | DR Vault | Safes | Platforms | Policies | Privileged Account Management | Account Onboarding | Password Verification | Password Change | Password Reconciliation | PSM Connectors | Connection Components | Active Directory | Authentication | HA | Load Balancing | CyberArk Upgrade | Version Upgrade | Security Patch | Hotfix | Vault Upgrade | DR Upgrade | PVWA Upgrade | CPM Upgrade | PSM Upgrade | Upgrade Assessment | Prerequisites | Compatibility Validation | Backup | Recovery | Rollback | Certificates | Configuration Validation | Custom Platforms | Custom Connectors | Post-Upgrade Testing | Post-Upgrade Validation