Security Engineer IT - CyberArk - Remote

At Cobalt Streamworks (Prime), we are a different kind of PBM, with a purpose beyond profits and a unique ability to connect care for those we serve. Looking for a purpose-driven career? Come build the future of pharmacy with us. Job Posting Title Security Engineer IT - CyberArk - Remote Job Description The Security Engineer is responsible for supporting, implementing, and operating privileged access management (PAM) controls that protect Prime’s systems from unauthorized access, misuse, alteration, or disclosure. This role is dedicated to securing privileged identities, credentials, and sessions across Prime’s applications, infrastructure, and cloud environments using CyberArk. The engineer will perform the administration and ongoing operation of CyberArk PAM technologies, ensuring privileged access is tightly controlled, monitored, and auditable. This role partners closely with infrastructure, application teams, security, and business stakeholders to enable secure privileged access while maintaining operational stability, compliance, and a strong security posture. Responsibilities CyberArk Privileged Access Management Administration Design, implement, and maintain CyberArk PAM solutions in alignment with Prime security standards and best practices. Administer and support CyberArk components including: Enterprise Password Vault (EPV) Password Vault Web Access (PVWA) Privileged Session Manager (PSM) CyberArk Secure Infrastructure Access (SIA) Endpoint Privilege Manager (EPM) Workforce Password Management (WPM) Manage CyberArk safes, platforms, and role‑based access controls for human and non‑human privileged accounts. Configure and enforce password policies, credential rotation schedules, and session controls for privileged accounts. Onboard and manage privileged accounts for servers, databases, applications, and service accounts. Privileged Access Operations & Support Provide L1/L2 operational support for PAM‑related incidents, including failed password rotations, access issues, and session connectivity problems. Perform root‑cause analysis of PAM failures and implement preventative controls to improve reliability. Monitor privileged access activity and alerts to identify anomalous behavior or policy violations. Produce audit evidence, compliance artifacts, and activity reports related to privileged access usage. Integration & Platform Management Integrate CyberArk with target systems including operating systems, databases, applications, and directory services. Support onboarding of new platforms, applications, and environments into CyberArk. Perform CyberArk version upgrades, patching, and component maintenance to ensure platform stability and security. Collaborate with infrastructure and application teams to design secure privileged access patterns for new and existing systems. Minimum Qualifications Bachelor's degree in Information Security, Computer Science or related area of study, or equivalent combination of education and/or relevant work experience; HS diploma from an accredited school or equivalent GED required 2 years of work experience in the Information Security field, or related Information Technology experience such as Server Engineering, Networking, Architecture or Application Development Must be eligible to work in the United States without the need for work visa or residency sponsorship Additional Qualifications Contribute to PAM documentation, security standards, and operational runbooks. Support privileged access lifecycle processes, including account creation, modification, review, and decommissioning. Participate in security incident response activities involving privileged account compromise or misuse. Support internal and external audits by providing technical explanations and evidence related to PAM controls. Serve as secondary or backup support for PAM services to ensure continuity and operational resilience. Identify opportunities to automate manual PAM processes and improve operational efficiency. Preferred Qualifications 2–4 years of experience in IT security, cybersecurity, or related technical field Experience with vulnerability management, firewalls, or endpoint protection tools Experience with scripting languages (e.g., Python, PowerShell) to support security automation Relevant certifications (e.g., CompTIA Security+, CySA+, or equivalent) preferred Every employee must understand, comply with and attest to the security responsibilities and security controls unique to their job, and comply with all applicable legal, regulatory, and contractual requirements and internal policies and procedures Every employee must be able to perform the essential functions of the job and, if requested, reasonable accommodations will be made to enable employees with disabilities to perform the essential functions, absent undue hardship. In addition, Prime retains the right to change or assign other duties to this job Potential pay for this position ranges from $74,000.00 - $118,000.00 based on