Senior CyberArk Engineer

Working with Us
Challenging. Meaningful. Life-changing. Those aren’t words that are usually associated with a job. But working at Bristol Myers Squibb is anything but usual. Here, uniquely interesting work happens every day, in every department. From optimizing a production line to the latest breakthroughs in cell therapy, this is work that transforms the lives of patients, and the careers of those who do it. You’ll get the chance to grow and thrive through opportunities uncommon in scale and scope, alongside high-achieving teams rich in diversity. Take your career farther than you thought possible.

Bristol Myers Squibb recognizes the importance of balance and flexibility in our work environment. We offer a wide variety of competitive benefits, services and programs that provide our employees with the resources to pursue their goals, both at work and in their personal lives. Read more: careers.bms.com/working-with-us.

Overview:

We are seeking a highly skilled and experienced Lead CyberArk Engineer to join our team. As the Lead CyberArk Engineer, you will be responsible for overseeing all aspects of CyberArk vault server installation, management, health monitoring, upgrades, and integration with ServiceNow Configuration Management Database (CMDB). You will play a crucial role in ensuring the security and efficiency of our organization's privileged account management infrastructure while aligning with our broader IT Service Management processes.

Responsibilities:

• Lead the design, implementation, and maintenance of CyberArk vault server infrastructure, ensuring alignment with IT Service Management best practices.

  
  

• Collaborate with IT Service Management teams to integrate CyberArk solutions seamlessly into ServiceNow CMDB, ensuring accurate inventory and configuration data for privileged accounts and related assets.

  
  

• Install, configure, and optimize CyberArk components such as the Enterprise Password Vault (EPV), Central Policy Manager (CPM), Privileged Session Manager (PSM), and Privileged Threat Analytics (PTA).

  
  

• Develop and maintain automation scripts for streamlining vault server deployment, configuration, and integration processes with ServiceNow CMDB.

  
  

• Design and enforce security policies and best practices for privileged account management within the CyberArk environment, aligning with IT Service Management policies and regulatory requirements.

  
  

• Conduct regular health checks and performance tuning of CyberArk vault servers to ensure optimal operation, with a focus on maintaining accurate CMDB data.

  
  

• Monitor system logs and alerts to identify and mitigate security threats and vulnerabilities, collaborating with IT Service Management teams for incident response and resolution.

  
  

• Plan and execute scheduled maintenance activities, including software upgrades and patch installations, while minimizing impact on IT Service Management operations.

  
  

• Provide technical guidance and mentorship to junior engineers and administrators within the CyberArk team, emphasizing the importance of CMDB integrity and alignment with IT Service Management processes.

  
  

• Stay abreast of industry trends and emerging technologies in privileged access management and IT Service Management, proactively identifying opportunities for process improvement and optimization.

  
  

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, or related field (or equivalent work experience).

  
  

• Extensive 5+ years of hands-on experience with CyberArk privileged access management solutions, including vault server installation, configuration, and administration.

  
  

• In-depth knowledge of CyberArk components such as EPV, CPM, PSM, and PTA, with a strong understanding of IT Service Management principles.

  
  

• Proficiency in scripting languages such as PowerShell and Python for automation and customization of CyberArk deployments and integration with ServiceNow CMDB.

  
  

• Experience with ServiceNow CMDB configuration and management, including discovery, reconciliation, and data normalization processes.

  
  

• Strong understanding of security principles and best practices related to privileged account management, with an emphasis on maintaining CMDB integrity and accuracy.

  
  

• Experience with system monitoring tools and techniques for proactive health monitoring and performance tuning, with a focus on CMDB-related data.

  
  

• Excellent analytical and problem-solving skills with the ability to troubleshoot complex technical issues, particularly those impacting CMDB data accuracy.

  
  

• Effective communication skills with the ability to collaborate with cross-functional teams and articulate technical concepts to non-technical stakeholders.

  
  

• Relevant certifications such as CyberArk Certified Delivery Engineer (CDE), CyberArk Certified Defender (CCD), or ServiceNow Certified Implementation Specialist are highly desirable.

  
  

#HYDIT #LI-Hybrid

If you come across a role that intrigues you but doesn’t perfectly line up with your resume, we encourage you to apply anyway. You could be one step away from work that will transform your life and career.

Uniquely Interesting Work, Life-changing Careers
With a single vision as inspiring as “Transforming patients’ lives through science™ ”, every BMS employee plays an integral role in work that goes far beyond ordinary. Each of us is empowered to apply our individual talents and unique perspectives in an inclusive culture, promoting diversity in clinical trials, while our shared values of passion, innovation, urgency, accountability, inclusion and integrity bring out the highest potential of each of our colleagues.

On-site Protocol

BMS has a diverse occupancy structure that determines where an employee is required to conduct their work. This structure includes site-essential, site-by-design, field-based and remote-by-design jobs. The occupancy type that you are assigned is determined by the nature and responsibilities of your role:

Site-essential roles require 100% of shifts onsite at your assigned facility. Site-by-design roles may be eligible for a hybrid work model with at least 50% onsite at your assigned facility. For these roles, onsite presence is considered an essential job function and is critical to collaboration, innovation, productivity, and a positive Company culture. For field-based and remote-by-design roles the ability to physically travel to visit customers, patients or business partners and to attend meetings on behalf of BMS as directed is an essential job function.

BMS is dedicated to ensuring that people with disabilities can excel through a transparent recruitment process, reasonable workplace accommodations/adjustments and ongoing support in their roles. Applicants can request a reasonable workplace accommodation/adjustment prior to accepting a job offer. If you require reasonable accommodations/adjustments in completing this application, or in any part of the recruitment process, direct your inquiries to adastaffingsupport@bms.com. Visit careers.bms.com/eeo-accessibility to access our complete Equal Employment Opportunity statement.

BMS cares about your well-being and the well-being of our staff, customers, patients, and communities. As a result, the Company strongly recommends that all employees be fully vaccinated for Covid-19 and keep up to date with Covid-19 boosters.

BMS will consider for employment qualified applicants with arrest and conviction records, pursuant to applicable laws in your area.

Any data processed in connection with role applications will be treated in accordance with applicable data privacy policies and regulations.