CyberArk Endpoint Privilege Manager (EPM) Architect

Yantran LLC

SAN JOSE, CA

JOB DETAILS
SKILLS
Application Programming Interface (API), Best Practices, Communication Skills, Desktop PC, Documentation, Endpoint Security, Enterprise Protection, IT Service Management (ITSM), Identify Issues, Mentoring, Microsoft Active Directory, Microsoft Product Family, Microsoft Windows Operating System, Operations Processes, REST (Representational State Transfer), Security Information and Event Management (SIEM), Security Infrastructure, System Center Configuration Manager (SCCM), Technical Support, Technical Writing, Windows PowerShell
LOCATION
SAN JOSE, CA
POSTED
2 days ago
Architect, deploy, and configure CyberArk EPM across enterprise Windows and macOS environments.
Lead end to end migration of CyberArk EPM policies, configurations, application groups, and rule sets from one environment/tenant to another.
Design and implement application control, privilege elevation, and least privilege strategies.
Develop, optimize, and troubleshoot EPM policies, trusted applications, and elevation rules.
Integrate CyberArk EPM with enterprise identity, security, and endpoint management platforms (Microsoft Intune, MECM/SCCM, SentinelOne, SIEM, etc.).
Automate deployment, policy management, and migration activities using PowerShell and REST APIs.
Perform architecture reviews, health assessments, and recommend best practices for performance, scalability, and security.
Collaborate with security, infrastructure, desktop engineering, and application teams throughout implementation and migration projects.
Create technical documentation, migration runbooks, and operational procedures.
Provide Level 3/4 technical support and mentor engineering teams.
8+ years of endpoint security experience with
4+ years of hands on CyberArk EPM architecture and implementation .
Proven experience deploying CyberArk EPM in large enterprise environments.
Strong experience migrating CyberArk EPM from one tenant/environment to another, including policy and configuration migration.
Deep understanding of application control, privilege management, allow/block rules, elevation policies, and sub process elevation.
Strong PowerShell scripting and API automation experience.
Experience with Microsoft Intune, MECM/SCCM, Active Directory, Entra ID, Windows security, and endpoint management.
Strong troubleshooting, communication, documentation, and stakeholder management skills.
CyberArk certifications (EPM, Defender, Sentry, or Client).
Experience with enterprise transformation, Zero Trust, and Privileged Access Management (PAM) initiatives.
Experience integrating EPM with SIEM, EDR/XDR, and ITSM platforms.

About the Company

Y

Yantran LLC