Principal Systems Engineer (CyberArk)

You will be responsible for managing Fidelity’s enterprise CyberArk application, supporting privileged credential management for 75,000 associates. Key duties include designing and enhancing access management capabilities, administering production environments, implementing monitoring and upgrades, improving CI/CD through automation, and ensuring disaster readiness. The role operates within an Agile framework, involving sprint planning, prioritization, and continuous improvement initiatives to boost team efficiency and delivery speed.

In this role, you will:

• Administer and operate the CyberArk application in a large-scale enterprise environment.

• Manage systems and applications on Linux/UNIX platforms.

• Design and implement cloud-based solutions using AWS or Microsoft Azure.

• Maintain and optimize networking components including firewalls and load balancers.

• Develop customized workflows and automated processes for vendor applications.

• Contribute to system architecture and design efforts.

• Present technical solutions and updates to both technical and business stakeholders.

The Expertise You Have and The Skills You Bring

• Bachelor’s degree in Computer Science, Computer Engineering, Computer Systems Networking, Information Systems/Science, or a related discipline.

• Minimum of 5 years of experience with CyberArk administration and operations.

• Proven experience in Linux/UNIX system and application management.

• Strong understanding of cloud architecture and migration strategies.

• Solid foundation in networking, including firewalls and load balancers.

• Demonstrated ability to lead technical initiatives and perform independent system design.

• Relevant certifications such as CyberArk Defender, Sentry, Guardian, and ISC2 certifications including CISSP, CCSP, or SSCP.

• Proficiency in CI/CD technologies including Jenkins, Git, Ansible, Chef, Artifactory, AWS CloudFormation, Terraform, EC2, Lambda, Docker/Kubernetes, and AWS KMS.

• Advanced scripting and automation skills, particularly in PowerShell and CyberArk PACLI.

• Experience developing automated workflows for vendor applications.

• Strong communication skills for engaging both technical and non-technical audiences.

Placement in the range will vary based on job responsibilities and scope, geographic location, candidate’s relevant experience, and other factors.

Base salary is only part of the total compensation package. Depending on the position and eligibility requirements, the offer package may also include bonus or other variable compensation.   

We offer a wide range of benefits to meet your evolving needs and help you live your best life at work and at home.  These benefits include comprehensive health care coverage and emotional well-being support, market-leading retirement, generous paid time off and parental leave, charitable giving employee match program, and educational assistance including student loan repayment, tuition reimbursement, and learning resources to develop your career.  Note, the application window closes when the position is filled or unposted.

Please be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.

Most roles at Fidelity are Hybrid, requiring associates to work onsite every other week (all business days, M-F) in a Fidelity office. This does not apply to Remote or fully Onsite roles.