CyberArk EPM Operations Security Analyst III

Job description

Anticipated End Date: 2026-09-15 Position Title: CyberArk EPM Operations Security Analyst III Job Description: CyberArk EPM Operations Security Analyst III Location: This role requires associates to be in-office 1 day per week, fostering collaboration and connectivity, while providing flexibility to support productivity and work-life balance. This approach combines structured office engagement with the autonomy of virtual work, promoting a dynamic and adaptable workplace. Ideal candidates will be able to report to one of our Pulse Point locations in Indianapolis, IN or St. Louis, MO. Alternate locations may be considered if candidates reside within a commuting distance from an office. Please note that per our policy on hybrid/virtual work, candidates not within a reasonable commuting distance from the posting location(s) will not be considered for employment, unless an accommodation is granted as required by law. The CyberArk EPM Operations Security Analyst III is responsible for providing enterprise security solutions for business, regulatory, and legal requirements, and assuring the confidentiality, integrity, and availability of information assets. The role will provide 24x7 operational support for CyberArk Endpoint Privilege Manager (EPM) and related privileged access services. This role is responsible for processing privilege elevation requests, validating approvals and governance requirements, administering temporary elevated access, monitoring privileged activity, and supporting audit and compliance obligations. The analyst partners closely with CyberArk Engineering, IAM, Cyber Security, Infrastructure, and Application Support teams to enable secure administrative access while supporting the organization's Least Privilege, Zero Standing Privilege (ZSP), and Identity Security initiatives. How you will make an impact: Process and fulfill CyberArk EPM privilege elevation requests through ServiceNow. Validate business justification, approvals, and change management requirements. Assign and remove temporary elevated access in accordance with approved procedures. Support emergency and break-glass access requests. Ensure all privileged access activities are properly documented and auditable. Administer day-to-day CyberArk EPM operations and policy assignments. Validate EPM agent health, policy deployment, and endpoint compliance. Troubleshoot access, policy enforcement, and elevation issues. Coordinate with Engineering teams to resolve complex technical problems. Support new policy rollouts, platform updates, and operational readiness activities. Monitor privileged activity, telemetry, and operational dashboards. Investigate policy violations, unauthorized privilege use, and operational issues. Support incident response activities and perform root cause analysis (RCA) for access-related incidents. Generate operational metrics, reporting, and audit evidence. Support internal audits, compliance reviews, and periodic access certifications. Partner with Engineering, Cyber Security, IAM, Infrastructure, and Application teams to support secure privileged access services. Assist with implementation and enforcement of security controls, least-privilege practices, and access governance standards. Contribute to the standardization and continuous improvement of operational procedures, runbooks, and documentation. Identify opportunities for automation, process improvements, and operational efficiencies. Participate and complete tasks associated with the implementations for systems and network security technologies. Provide trouble resolution on complex issues. Perform system and network upgrade tasks. Design and analyze vendor services and information security requirements; maintains relationship with key vendors. Responds to Level 3 and 4 change and problem requests. Leads Level 1 and 2 incident recoveries and root cause analysis. Coordinates and prepares reporting of data security events and incidents. Maintains relationship with key vendors Performs system and network upgrade tasks. Participates and completes lights-on initiatives to consolidate equipment and/or implement business relocations Minimum Requirements: Requires an BA/BS degree in Information Technology, Computer Science or related field of study and a minimum of 3 years of experience in a support and operations or design and engineering role; or any combination of education and experience, which would provide an equivalent background. Preferred Skills, Capabilities and Experiences: Strong understanding of Identity and Access Management (IAM), Privileged Access Management (PAM), and access governance principles preferred. Knowledge of Least Privilege, Zero Standing Privilege (ZSP), Tier-0 security, Zero Trust, and Identity Threat Detection & Response (ITDR) concepts preferred. Experience with Active Directory, security groups, and Role-Based Access Control (RBAC) preferred. Experience supporting Windows Server environments preferred. Familiarity with ServiceNow or similar ITSM platforms preferred. Ability to analyze logs, audit records, telemetry, and security events preferred. CyberArk Endpoint Privilege Manager (EPM) experience preferred. CyberArk PAM / PSM experience preferred. SailPoint Identity Security Cloud experience preferred. PowerShell scripting experience preferred. REST APIs and automation experience preferred. BigFix or endpoint management platforms experience preferred. Windows Security and endpoint protection technologies experience preferred. 3–5 years of experience in PAM, IAM, Security Operations, Windows Administration, Access Governance, or Infrastructure Operations preferred. Experience supporting enterprise server environments and access management processes preferred. Experience working within formal change management, approval, and compliance frameworks preferred. CyberArk EPM or CyberArk PAM administration experience preferred. Experience supporting regulated industries such as Healthcare, Insurance, Financial Services, or Government preferred. Experience supporting 24x7 operational environments preferred. Job Level: Non-Management Exempt Workshift: Job Family: IFT > IT Security & Compliance Please be advised that Elevance Health only accepts resumes for compensation from agencies that have a signed agreement with Elevance Health. Any unsolicited resumes, including those submitted to hiring managers, are deemed to be the property of Elevance Health. Who We Are Elevance Health is a health company dedicated to improving lives and communities – and making healthcare simpler. We are a Fortune 25 company with a longstanding history in the healthcare industry, looking for leaders at all levels of the organization who are passionate about making an impact on our members and the communities we serve. How We Work At Elevance Health, we are creating a culture that is designed to advance our strategy but will also lead to personal and professional growth for our associates. Our values and behaviors are the root of our culture. They are how we achieve our strategy, power our business outcomes and drive our shared success - for our consumers, our associates, our communities and our business. We offer a range of market-competitive total rewards that include merit increases, paid holidays, Paid Time Off, and incentive bonus programs (unless covered by a collective bargaining agreement), medical, dental, vision, short and long term disability benefits, 401(k) +match, stock purchase plan, life insurance, wellness programs and financial education resources, to name a few. Elevance Health operates in a Hybrid Workforce Strategy. Unless specified as primarily virtual by the hiring manager, associates are required to work at an Elevance Health location at least once per week, and potentially several times per week. Specific requirements and expectations for time onsite will be discussed as part of the hiring process. The health of our associates and communities is a top priority for Elevance Health. We require all new candidates in certain patient/member-facing roles to become vaccinated against COVID-19 and Influenza. If you are not vaccinated, your offer will be rescinded unless you provide an acceptable explanation. Elevance Health will also follow all relevant federal, state and local laws. Elevance Health is an Equal Employment Opportunity employer, and all qualified applicants will receive consideration for employment without regard to age, citizenship status, color, creed, disability, ethnicity, genetic information, gender (including gender identity and gender expression), marital status, national origin, race, religion, sex, sexual orientation, veteran status or any other status or condition protected by applicable federal, state, or local laws. Applicants who require accommodation to participate in the job application process should submit the following form: Accessibility Accommodation Request Form and a member of the team will be in contact. Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state, and local laws, including, but not limited to, the Los Angeles County Fair Chance Ordinance and the California Fair Chance Act. Prospective employees required to be screened under Florida law should review the education and awareness resources at HB531 | Florida Agency for Health Care Administration . NOTE: Workday keeps job postings active through 11:59:59 PM on the day before the listed end date. Example: If the end date is 3/13, the posting will automatically come down on 3/12 at 11:59:59 PM. In other words — the job is posted until 3/13, not through 3/13.