What are the responsibilities and job description for the CyberArk Endpoint Privilege Manager (EPM) Architect in Sanjose, CA position at Mergen IT LLC?
Role: CyberArk Endpoint Privilege Manager (EPM) Architect
Location: Sanjose, CA
Duration: 12 Months Contact
Description
- Architect, deploy, and configure CyberArk EPM across enterprise Windows and macOS environments.
- Lead end to end migration of CyberArk EPM policies, configurations, application groups, and rule sets from one environment/tenant to another.
- Design and implement application control, privilege elevation, and least privilege strategies.
- Develop, optimize, and troubleshoot EPM policies, trusted applications, and elevation rules.
- Integrate CyberArk EPM with enterprise identity, security, and endpoint management platforms (Microsoft Intune, MECM/SCCM, SentinelOne, SIEM, etc.).
- Automate deployment, policy management, and migration activities using PowerShell and REST APIs.
- Perform architecture reviews, health assessments, and recommend best practices for performance, scalability, and security.
- Collaborate with security, infrastructure, desktop engineering, and application teams throughout implementation and migration projects.
- Create technical documentation, migration runbooks, and operational procedures.
- Provide Level 3/4 technical support and mentor engineering teams.
- 8 years of endpoint security experience with 4 years of hands on CyberArk EPM architecture and implementation.
- Proven experience deploying CyberArk EPM in large enterprise environments.
- Strong experience migrating CyberArk EPM from one tenant/environment to another, including policy and configuration migration.
- Deep understanding of application control, privilege management, allow/block rules, elevation policies, and sub process elevation.
- Strong PowerShell scripting and API automation experience.
- Experience with Microsoft Intune, MECM/SCCM, Active Directory, Entra ID, Windows security, and endpoint management.
- Strong troubleshooting, communication, documentation, and stakeholder management skills.
- CyberArk certifications (EPM, Defender, Sentry, or Guardian).
- Experience with enterprise transformation, Zero Trust, and Privileged Access Management (PAM) initiatives.
Experience integrating EPM with SIEM, EDR/XDR, and ITSM platforms.