Anticipated End Date:2026-09-15
Position Title:CyberArk EPM Operations Security Analyst III
Job Description:CyberArk EPM Operations Security Analyst IIILocation: This role requires associates to be in-office 1 day per week, fostering collaboration and connectivity, while providing flexibility to support productivity and work-life balance. This approach combines structured office engagement with the autonomy of virtual work, promoting a dynamic and adaptable workplace. Ideal candidates will be able to report to one of our Pulse Point locations in Indianapolis, IN or St. Louis, MO. Alternate locations may be considered if candidates reside within a commuting distance from an office.
Please note that per our policy on hybrid/virtual work, candidates not within a reasonable commuting distance from the posting location(s) will not be considered for employment, unless an accommodation is granted as required by law.
The
CyberArk EPM Operations Security Analyst III is responsible for providing enterprise security solutions for business, regulatory, and legal requirements, and assuring the confidentiality, integrity, and availability of information assets. The role will provide 24x7 operational support for CyberArk Endpoint Privilege Manager (EPM) and related privileged access services. This role is responsible for processing privilege elevation requests, validating approvals and governance requirements, administering temporary elevated access, monitoring privileged activity, and supporting audit and compliance obligations. The analyst partners closely with CyberArk Engineering, IAM, Cyber Security, Infrastructure, and Application Support teams to enable secure administrative access while supporting the organization's Least Privilege, Zero Standing Privilege (ZSP), and Identity Security initiatives.
How you will make an impact:- Process and fulfill CyberArk EPM privilege elevation requests through ServiceNow.
- Validate business justification, approvals, and change management requirements.
- Assign and remove temporary elevated access in accordance with approved procedures.
- Support emergency and break-glass access requests.
- Ensure all privileged access activities are properly documented and auditable.
- Administer day-to-day CyberArk EPM operations and policy assignments.
- Validate EPM agent health, policy deployment, and endpoint compliance.
- Troubleshoot access, policy enforcement, and elevation issues.
- Coordinate with Engineering teams to resolve complex technical problems.
- Support new policy rollouts, platform updates, and operational readiness activities.
- Monitor privileged activity, telemetry, and operational dashboards.
- Investigate policy violations, unauthorized privilege use, and operational issues.
- Support incident response activities and perform root cause analysis (RCA) for access-related incidents.
- Generate operational metrics, reporting, and audit evidence.
- Support internal audits, compliance reviews, and periodic access certifications.
- Partner with Engineering, Cyber Security, IAM, Infrastructure, and Application teams to support secure privileged access services.
- Assist with implementation and enforcement of security controls, least-privilege practices, and access governance standards.
- Contribute to the standardization and continuous improvement of operational procedures, runbooks, and documentation.
- Identify opportunities for automation, process improvements, and operational efficiencies.
- Participate and complete tasks associated with the implementations for systems and network security technologies.
- Provide trouble resolution on complex issues.
- Perform system and network upgrade tasks.
- Design and analyze vendor services and information security requirements; maintains relationship with key vendors.
- Responds to Level 3 and 4 change and problem requests.
- Leads Level 1 and 2 incident recoveries and root cause analysis.
- Coordinates and prepares reporting of data security events and incidents.
- Maintains relationship with key vendors
- Performs system and network upgrade tasks.
- Participates and completes lights-on initiatives to consolidate equipment and/or implement business relocations
Minimum Requirements:Requires an BA/BS degree in Information Technology, Computer Science or related field of study and a minimum of 3 years of experience in a support and operations or design and engineering role; or any combination of education and experience, which would provide an equivalent background.
Preferred Skills, Capabilities and Experiences:- Strong understanding of Identity and Access Management (IAM), Privileged Access Management (PAM), and access governance principles preferred.
- Knowledge of Least Privilege, Zero Standing Privilege (ZSP), Tier-0 security, Zero Trust, and Identity Threat Detection & Response (ITDR) concepts preferred.
- Experience with Active Directory, security groups, and Role-Based Access Control (RBAC) preferred.
- Experience supporting Windows Server environments preferred.
- Familiarity with ServiceNow or similar ITSM platforms preferred.
- Ability to analyze logs, audit records, telemetry, and security events preferred.
- CyberArk Endpoint Privilege Manager (EPM) experience preferred.
- CyberArk PAM / PSM experience preferred.
- SailPoint Identity Security Cloud experience preferred.
- PowerShell scripting experience preferred.
- REST APIs and automation experience preferred.
- BigFix or endpoint management platforms experience preferred.
- Windows Security and endpoint protection technologies experience preferred.
- 3-5 years of experience in PAM, IAM, Security Operations, Windows Administration, Access Governance, or Infrastructure Operations preferred.
- Experience supporting enterprise server environments and access management processes preferred.
- Experience working within formal change management, approval, and compliance frameworks preferred.
- CyberArk EPM or CyberArk PAM administration experience preferred.
- Experience supporting regulated industries such as Healthcare, Insurance, Financial Services, or Government preferred.
- Experience supporting 24x7 operational environments preferred.
Job Level:Non-Management Exempt
Workshift:Job Family:IFT > IT Security & Compliance
Please be advised that Elevance Health only accepts resumes for compensation from agencies that have a signed agreement with Elevance Health. Any unsolicited resumes, including those submitted to hiring managers, are deemed to be the property of Elevance Health.
NOTE: Workday keeps job postings active through 11:59:59 PM on the day before the listed end date. Example: If the end date is 3/13, the posting will automatically come down on 3/12 at 11:59:59 PM. In other words - the job is posted until 3/13, not through 3/13.
