CareFirst Careers

Specialist, Cyber Security Sr. (CyberArk)

Resp & Qualifications


Under the supervision of Manager Identity Engineering and Development, the incumbent’s accountabilities include, but are not limited to the following:

Analyze, design and develop new features for the CyberArk Privileged Identity Management product family, focusing on expanding the capabilities of CyberArk products to integrate with multiple ranges of platforms, operating systems and applications.

Participates in design efforts for security and Privileged Identity Management (PIM) portions of new applications along with application development areas, supports PIM tools, supports troubleshooting application issues, perform version upgrades to the current CyberArk environment.

Administer and engineer CyberArk for integrating privileged accounts for associates, applications, services , Safes, Policies, roles, permissions to access various systems including windows servers, UNIX servers, mainframe and applications.

Expertise in developing Custom component connections / plugins to various applications. Good understanding of z/OS and be able to integrate RACF accounts with CyberArk through custom plugins.

Recognized as subject matter expert for CyberArk and related technologies. May participate in training of new Associates on PIM technologies and operating procedures.  Facilitates communication between all key IT groups and the customer community on PIM security-related items.


Core Requirement:

College Degree in an Information Security or Technology related field or equivalent experience plus 5-8 years related experience. 

The incumbent will possess an extensive knowledge of information security concepts, information security policies and system architecture concepts. 

In-depth knowledge and at least 3+ years of proven experience working with CyberArk suite of privileged identity management solutions primarily engineering experience. The incumbent should have a demonstrated ability to work effectively with CyberArk PIM information security tools in a large, complex, multi-platform environment.

Additional Requirements:

  • Excellent written, presentation and verbal communication skills.
  • Proactive, highly motivated individual with a high work ethic and goal-oriented approach.
  • Experience in large complex projects – advantage.
  • Define and implement continuous integration and a deployment pipeline – advantage.
  • Experience in multi-threaded environment  - advantage.
  • Good understanding of basic networking concepts, firewalls and load balancers.
  • Ability to coordinate projects and tasks in line with department and company goals and objectives.
  • Ability to self-direct and work independently.
  • Ability to keep associates motivated and interested in their responsibilities and opportunities.
  • Possess good working knowledge and understanding of Java, JavaScript, UNIX, Windows, credential stores such as Microsoft Active Directory and IBM Directory Server, and Mainframe (TSO, CICS) environments and their related security capabilities and functions.
  • Strong analytical / problem solving skills
  • Working knowledge of typical application life cycle development processes

    This position will require twenty-four by seven support responsibilities. Incumbents will need to travel among CareFirst’s Corporate locations.


Department: Identity Engineering & Development.

Equal Employment Opportunity

CareFirst BlueCross BlueShield is an Equal Opportunity (EEO) employer.  It is the policy of the Company to provide equal employment opportunities to all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran or disabled status, or genetic information.

Hire Range Disclaimer

Actual salary will be based on relevant job experience and work history.

Where To Apply

Please visit our website to apply:

Closing Date

Please apply before: 11/5/2020.

Federal Disc/Physical Demand

Note:  The incumbent is required to immediately disclose any debarment, exclusion, or other event that makes him/her ineligible to perform work directly or indirectly on Federal health care programs.


The associate is primarily seated while performing the duties of the position.  Occasional walking or standing is required.  The hands are regularly used to write, type, key and handle or feel small controls and objects.  The associate must frequently talk and hear.  Weights up to 25 pounds are occasionally lifted.

Sponsorship in US

Must be eligible to work in the U.S. without Sponsorship

Learn more about Information Technology