Job Description

Sr. CyberArk EPM – Endpoint Application Control Technical Lead

Fulltime Only

Job Summary:

We are seeking a Senior CyberArk Endpoint Privilege Manager (EPM) Technical Lead with a specialized focus on application control to drive enterprise-wide implementation and optimization of CyberArk EPM for Windows endpoints. This role is pivotal in strengthening endpoint defenses by enforcing granular application control policies, reducing attack surfaces, and ensuring compliance with internal and external security standards.

The ideal candidate will possess deep technical expertise in CyberArk EPM, particularly in designing and deploying application control frameworks that support least privilege access and secure software execution across diverse desktop and laptop environments.

Key Responsibilities:

• Lead the design, deployment, and fine-tuning of CyberArk EPM application control policies for Windows-based endpoints.
• Develop and enforce application whitelisting, blacklisting, and greylisting strategies to manage software execution and mitigate unauthorized application usage.
• Collaborate with endpoint operations, security engineering, and automation teams to streamline policy rollout, enforcement, and exception handling.
• Analyze application usage patterns and developadaptive control policies that balance security with user productivity.
• Integrate application control with broader endpoint protection strategies, including threat detection, behavioral analysis, and incident response workflows.
• Conduct technical design reviews, resolve implementation challenges, and present solutions to stakeholders.
• Continuously assess and improve application control effectiveness through metrics, reporting, and feedback loops.

Qualifications:

• 3+ years of hands-on experience administering CyberArk Endpoint Privilege Manager (EPM) in large-scale Windows environments.
• Proven expertise in Windows workstation and server management, with a focus on endpoint application control.
• Experience managing EPM deployments at scale (10k+ endpoints; ideally 90k+).
• Strong understanding of platform operations and application architecture.
• Experience in environments without centralized software distribution (“no software store”) and ability to design compensating controls.
• Demonstrated ability to lead technical teams and drive strategic security initiatives.
• Excellent communication, documentation, and cross-functional collaboration skills.

Job Tags

Similar Jobs