Client Requirements: applicants MUST BE US Citizens and be able to obtain Public Trust clearance

The CTG Experience

At Capital Technology Group (CTG), our teams are passionate about modernizing how the federal government delivers software. We partner with federal agencies to build secure, scalable, and mission-driven solutions that make a meaningful impact on millions of people. Recognized by The Washington Post as a Top Workplace in 2025 and 2026. CTG fosters a culture rooted in our core values. Our values guide how we work together and support one another, creating an environment where employees feel trusted, empowered, and encouraged to grow both personally and professionally.

About the Role

CTG is seeking a CyberArk Subject Matter Expert (SME) / DevOps Engineer to implement and support scalable, secure, mission-driven technical solutions supporting federal modernization initiatives.

You Will Get To

• Serve as the subject matter expert for CyberArk implementation, configuration, and administration
• Advise on and implement best practices for credential vaulting, privileged session management, and credential rotation
• Onboard privileged accounts, safes, and platforms, and manage access policies
• Support DevOps activities related to privileged access tooling, automation, and secrets management
• Automate CyberArk tasks and integrations using REST APIs and scripting
• Troubleshoot and resolve user issues with CyberArk access and components
• Maintain CyberArk infrastructure through upgrades, patching, and health monitoring
• Document configurations, procedures, and recurring issues and resolutions

Who You Are

• A hands-on engineer with experience implementing and administering CyberArk privileged access management (PAM) solutions
• Strong troubleshooting skills across CyberArk components, Windows and Linux systems, Active Directory, and automation pipelines
• Organized and customer-focused with strong documentation and communication skills

Qualifications

• 2+ years of hands-on experience implementing and administering CyberArk PAM (Vault, PVWA, CPM, PSM/PSMP)
• Experience configuring credential rotation, session recording and monitoring, and safe and account onboarding
• Scripting experience with PowerShell and/or Python, including use of the CyberArk REST API
• Experience with CI/CD tools such as Jenkins, GitLab CI, or Azure DevOps
• Familiarity with Active Directory/LDAP, Windows Server, and Linux environments
• Strong troubleshooting and problem-solving skills

Nice to Have

• CyberArk certifications (Defender, Sentry, or Guardian)
• Experience with CyberArk Conjur, Secrets Manager, or Privilege Cloud
• Infrastructure-as-code or configuration management experience (Terraform, Ansible)
• Cloud experience (AWS or Azure)
• Experience supporting federal environments
• Active Public Trust or security clearance

Salary

We are committed to offering a competitive salary for this position, with an estimated range of $70k–$110k annually. Please note that this range is intended to provide a general idea of what to expect. The final offer may vary based on experience, skills, and other factors.