Mac Endpoint Engineer (macOS + Intune) Overview: Onsite contract role (6+ months, possible ... Entra ID, Defender for Endpoint (DLP), CrowdStrike, CyberArk EPM, Qualys, GlobalProtect ZTNA ...
Mac Endpoint Engineer (macOS + Intune) Overview: Onsite contract role (6+ months, possible ... Entra ID, Defender for Endpoint (DLP), CrowdStrike, CyberArk EPM, Qualys, GlobalProtect ZTNA ...
Sr. Security Engineer I - Identity Access Management
$117K - $160K/yr
Dedication to continuous improvement, security process engineering, and operational excellence. * On Call Rotation and some after hours work required. * Familiarity with Active Directory, CyberArk ...
Sr. Security Engineer I - Identity Access Management
$117K - $160K/yr
Dedication to continuous improvement, security process engineering, and operational excellence. * On Call Rotation and some after hours work required. * Familiarity with Active Directory, CyberArk ...
Sr. Security Engineer I - Identity Access Management
$117K - $160K/yr
Dedication to continuous improvement, security process engineering, and operational excellence. * On Call Rotation and some after hours work required. * Familiarity with Active Directory, CyberArk ...
Sr. Security Engineer I - Identity Access Management
$117K - $160K/yr
Dedication to continuous improvement, security process engineering, and operational excellence. * On Call Rotation and some after hours work required. * Familiarity with Active Directory, CyberArk ...
Network Security Engineer
San Jose, CA · On-site
$122K - $167K/yr
Familiarity with IAM and PAM solutions (CyberArk, BeyondTrust, Okta, Azure AD) * Solid ... Ability to work in a 24x7 on-call rotation environment Preferred Qualifications * Industry ...
Quick apply
Network Security Engineer
San Jose, CA · On-site
$122K - $167K/yr
Familiarity with IAM and PAM solutions (CyberArk, BeyondTrust, Okta, Azure AD) * Solid ... Ability to work in a 24x7 on-call rotation environment Preferred Qualifications * Industry ...
Site Reliability Engineer (AWS)
Jacksonville, FL · Hybrid
$52.75 - $70.25/hr
Participate in on-call rotations and provide 24/7 support for critical incidents. What you bring ... CyberArk, SNOW, Jira, Confluence, Oracle DB, PostgreSQL DB, EC2, EKS, KMS, Secrets Manager (Stores ...
Site Reliability Engineer (AWS)
Jacksonville, FL · Hybrid
$52.75 - $70.25/hr
Participate in on-call rotations and provide 24/7 support for critical incidents. What you bring ... CyberArk, SNOW, Jira, Confluence, Oracle DB, PostgreSQL DB, EC2, EKS, KMS, Secrets Manager (Stores ...
Site Reliability Engineer (AWS)
Atlanta, GA · Hybrid
$54.75 - $72.75/hr
Participate in on-call rotations and provide 24/7 support for critical incidents. What you bring ... CyberArk, SNOW, Jira, Confluence, Oracle DB, PostgreSQL DB, EC2, EKS, KMS, Secrets Manager (Stores ...
New
Site Reliability Engineer (AWS)
Atlanta, GA · Hybrid
$54.75 - $72.75/hr
Participate in on-call rotations and provide 24/7 support for critical incidents. What you bring ... CyberArk, SNOW, Jira, Confluence, Oracle DB, PostgreSQL DB, EC2, EKS, KMS, Secrets Manager (Stores ...
New
Site Reliability Engineer (AWS)
Milwaukee, WI · Hybrid
$56.25 - $74.75/hr
Participate in on-call rotations and provide 24/7 support for critical incidents. What you bring ... CyberArk, SNOW, Jira, Confluence, Oracle DB, PostgreSQL DB, EC2, EKS, KMS, Secrets Manager (Stores ...
Site Reliability Engineer (AWS)
Milwaukee, WI · Hybrid
$56.25 - $74.75/hr
Participate in on-call rotations and provide 24/7 support for critical incidents. What you bring ... CyberArk, SNOW, Jira, Confluence, Oracle DB, PostgreSQL DB, EC2, EKS, KMS, Secrets Manager (Stores ...
Site Reliability Engineer (AWS)
Milwaukee, WI · Hybrid
$56.25 - $74.75/hr
Participate in on-call rotations and provide 24/7 support for critical incidents. What you bring ... CyberArk, SNOW, Jira, Confluence, Oracle DB, PostgreSQL DB, EC2, EKS, KMS, Secrets Manager (Stores ...
Site Reliability Engineer (AWS)
Milwaukee, WI · Hybrid
$56.25 - $74.75/hr
Participate in on-call rotations and provide 24/7 support for critical incidents. What you bring ... CyberArk, SNOW, Jira, Confluence, Oracle DB, PostgreSQL DB, EC2, EKS, KMS, Secrets Manager (Stores ...
Lead Information Security Engineer
Plano, TX · On-site
$70.47 - $86.85/hr
The position involves advanced troubleshooting and participation in a monthly on-call rotation to ... Experience with CyberArk * Relevant security certifications * Knowledge of AI and Machine Learning
Lead Information Security Engineer
Plano, TX · On-site
$70.47 - $86.85/hr
The position involves advanced troubleshooting and participation in a monthly on-call rotation to ... Experience with CyberArk * Relevant security certifications * Knowledge of AI and Machine Learning
Site Reliability Engineer (AWS)
Atlanta, GA · Hybrid
$54.75 - $72.75/hr
Participate in on-call rotations and provide 24/7 support for critical incidents. What you bring ... CyberArk, SNOW, Jira, Confluence, Oracle DB, PostgreSQL DB, EC2, EKS, KMS, Secrets Manager (Stores ...
Site Reliability Engineer (AWS)
Atlanta, GA · Hybrid
$54.75 - $72.75/hr
Participate in on-call rotations and provide 24/7 support for critical incidents. What you bring ... CyberArk, SNOW, Jira, Confluence, Oracle DB, PostgreSQL DB, EC2, EKS, KMS, Secrets Manager (Stores ...
Site Reliability Engineer (AWS)
Jacksonville, FL · Hybrid
$52.75 - $70.25/hr
Participate in on-call rotations and provide 24/7 support for critical incidents. What you bring ... CyberArk, SNOW, Jira, Confluence, Oracle DB, PostgreSQL DB, EC2, EKS, KMS, Secrets Manager (Stores ...
Site Reliability Engineer (AWS)
Jacksonville, FL · Hybrid
$52.75 - $70.25/hr
Participate in on-call rotations and provide 24/7 support for critical incidents. What you bring ... CyberArk, SNOW, Jira, Confluence, Oracle DB, PostgreSQL DB, EC2, EKS, KMS, Secrets Manager (Stores ...
Provide day-to-day operational support and participate in an after-hours on-call rotation to ... as OCI Vault, CyberArk, or similar tools. * Experience supporting hybrid or multi-cloud ...
New
Provide day-to-day operational support and participate in an after-hours on-call rotation to ... as OCI Vault, CyberArk, or similar tools. * Experience supporting hybrid or multi-cloud ...
New
Senior Platform Engineer (OCI)
Vienna, VA · On-site
Provide day-to-day operational support and participate in an after-hours on-call rotation to ... as OCI Vault, CyberArk, or similar tools. * Experience supporting hybrid or multi-cloud ...
New
Senior Platform Engineer (OCI)
Vienna, VA · On-site
Provide day-to-day operational support and participate in an after-hours on-call rotation to ... as OCI Vault, CyberArk, or similar tools. * Experience supporting hybrid or multi-cloud ...
New
Sr. Network Engineer
Washington, DC · Hybrid
$117K - $161K/yr
This position may require you to be periodically on call - after duty hours * Occasional travel may ... CyberArk and STIG Monitoring technologies such as Riverbed, SolarWinds, and catalyst center ...
Sr. Network Engineer
Washington, DC · Hybrid
$117K - $161K/yr
This position may require you to be periodically on call - after duty hours * Occasional travel may ... CyberArk and STIG Monitoring technologies such as Riverbed, SolarWinds, and catalyst center ...
Provide day-to-day operational support and participate in an after-hours on-call rotation to ... as OCI Vault, CyberArk, or similar tools. * Experience supporting hybrid or multi-cloud ...
New
Provide day-to-day operational support and participate in an after-hours on-call rotation to ... as OCI Vault, CyberArk, or similar tools. * Experience supporting hybrid or multi-cloud ...
New
Provide day-to-day operational support and participate in an after-hours on-call rotation to ... as OCI Vault, CyberArk, or similar tools. * Experience supporting hybrid or multi-cloud ...
New
Provide day-to-day operational support and participate in an after-hours on-call rotation to ... as OCI Vault, CyberArk, or similar tools. * Experience supporting hybrid or multi-cloud ...
New
Active Directory / Entra ID / IAM Engineer- HYBRID
Manhattan, NY · Hybrid
$70 - $80/hr
Participate in on-call rotations, after-hours change windows, and incident response including major ... Experience with IAM and PAM platforms such as SailPoint, Okta, and CyberArk. * Proficiency in ...
Quick apply
Active Directory / Entra ID / IAM Engineer- HYBRID
Manhattan, NY · Hybrid
$70 - $80/hr
Participate in on-call rotations, after-hours change windows, and incident response including major ... Experience with IAM and PAM platforms such as SailPoint, Okta, and CyberArk. * Proficiency in ...
Systems Engineer II - PAM
Chicago, IL · Hybrid
$99K - $121K/yr
... 24x7 on-call rotation. * Produce reporting and analytics related to privileged access, secrets ... PAM platforms (Delinea, CyberArk, etc.) * Secrets management tools (Vault, Secret Server) * AWS IAM
Systems Engineer II - PAM
Chicago, IL · Hybrid
$99K - $121K/yr
... 24x7 on-call rotation. * Produce reporting and analytics related to privileged access, secrets ... PAM platforms (Delinea, CyberArk, etc.) * Secrets management tools (Vault, Secret Server) * AWS IAM
Systems Engineer II - PAM
Scottsdale, AZ · Hybrid
$99K - $121K/yr
... 24x7 on-call rotation. * Produce reporting and analytics related to privileged access, secrets ... PAM platforms (Delinea, CyberArk, etc.) * Secrets management tools (Vault, Secret Server) * AWS IAM
Systems Engineer II - PAM
Scottsdale, AZ · Hybrid
$99K - $121K/yr
... 24x7 on-call rotation. * Produce reporting and analytics related to privileged access, secrets ... PAM platforms (Delinea, CyberArk, etc.) * Secrets management tools (Vault, Secret Server) * AWS IAM
Crowdstrike, Cyberark, Cloudflare, secure browser policies), balancing risk against usability in ... Participate in the oncall rotation for relevant security and identity services. Lead or contribute ...
Crowdstrike, Cyberark, Cloudflare, secure browser policies), balancing risk against usability in ... Participate in the oncall rotation for relevant security and identity services. Lead or contribute ...
On Call Cyberark Engineer information
See salary details
$72.5K - $82.7K
20% of jobs
$84.7K is the 25th percentile. Wages below this are outliers.
$82.7K - $93K
24% of jobs
The median wage is $96K / yr.
$93K - $103.2K
18% of jobs
$103.2K - $113.4K
4% of jobs
$113.4K - $123.6K
3% of jobs
$123.6K - $133.9K
4% of jobs
$136.4K is the 75th percentile. Wages above this are outliers.
$133.9K - $144.1K
2% of jobs
$144.1K - $154.3K
1% of jobs
$154.3K - $164.5K
4% of jobs
$164.5K - $174.8K
12% of jobs
$174.8K - $185K
6% of jobs
$72.5K
$116.1K
$185K
How much do on call cyberark engineer jobs pay per year?
What is the difference between On Call Cyberark Engineer vs Cybersecurity Analyst?
| Aspect | On Call Cyberark Engineer | Cybersecurity Analyst |
|---|---|---|
| Certifications | CyberArk certifications, security certifications | CompTIA Security+, CISSP, CEH |
| Work Environment | On-call, incident response, security tool management | Monitoring, analysis, threat detection |
| Employer & Industry | Financial, healthcare, enterprise sectors using CyberArk | Various industries focusing on security monitoring |
The On Call Cyberark Engineer primarily manages and responds to security incidents involving CyberArk solutions, often working on-call to ensure privileged access security. In contrast, a Cybersecurity Analyst focuses on monitoring security systems, analyzing threats, and implementing security measures across various tools. While both roles require security certifications and involve security environments, the Engineer's role is more technical and reactive, whereas the Analyst's role is more analytical and proactive.
Job description
Interview : Video
Visa : USC, GC
This is onsite from day-1
Description :
Need Candidates mother's maiden name
send full linkedin
Must send date of birth
must send 3 references
Position: Mac Endpoint Engineer (macOS + Intune)
Overview:
Onsite contract role (6+ months, possible extension) for a proactive engineer ready to shape macOS in a Microsoft-centric enterprise. Client is elevating macOS to first-class status and needs a hands-on Mac Endpoint Engineer to build and harden a modern Intune-managed macOS environment. You will deliver zero-touch enrollment, seamless Platform SSO (PSSO) first sign-in, large-scale macOS app packaging, configuration, compliance, automation, and a strong security posture with a goal of achieving 1:1 parity with Windows devices.
Key Responsibilities
- Design/operate zero-touch enrollment with ABM + ADE (PreStage through post-enrollment fixes).
- Build a consistent first sign-in experience using PSSO + Intune.
- Improve enrollment flows, bootstrap content, and post-enrollment automations.
- Lead macOS app packaging for Intune (PKG/DMG + pre/post scripts, detection rules, dependencies, retries, uninstall logic).
- Create a scalable third-party app deployment model with staged rings, rollback plans, and change control.
- Collaborate with Packaging/QA on versioning, testing, and release notes.
- Manage Intune baseline configs & compliance policies; suggest UX/reliability improvements.
- Enforce CIS macOS benchmark controls (macOS 26+); own configuration/enforcement, partner with InfoSec.
- Integrate/support: Entra ID, Defender for Endpoint (DLP), CrowdStrike, CyberArk EPM, Qualys, GlobalProtect ZTNA.
- utomate via scripting (bash/zsh/Python; PowerShell for Graph) - provisioning, remediations, health checks, reporting.
- Deliver actionable Intune dashboard metrics (enrollment success, sign-in time, compliance drift, packaging SLAs).
- Write KB articles/how-tos; transfer knowledge to Support; provide occasional Tier 3 guidance (no on-call).
- Partner with Identity, Security, Networking, and Support to prepare for go-live and scale across US users.
- Contribute to standards, guardrails, and SOPs for long-term stability.
MDM: Microsoft Intune only (no Jamf/Kandji).
Minimum: macOS 26 (Tahoe).
Stack: Entra ID, Defender for Endpoint , CrowdStrike, CyberArk EPM, Qualys, GlobalProtect.
Standards: CIS macOS benchmark (InfoSec sets policy; you implement/operate).
Tools: BM + ADE in place; Intune for compliance & reporting.
Required Qualifications
- 3-5+ years enterprise macOS MDM (Intune preferred).
- Strong Intune macOS packaging expertise (PKG/DMG, scripts, detection, rings, rollback).
- Hands-on ADE zero-touch + PSSO implementation.
- Scripting: bash/zsh/Python (PowerShell/Graph as needed).
- Experience enforcing CIS controls via Intune profiles/policies.
- Familiarity with Defender, CrowdStrike, CyberArk EPM, Qualys, and GlobalProtect.
- Excellent documentation & knowledge-transfer skills.
Preferred
- Self-healing remediations / drift correction.
- iOS/iPadOS in Intune (bonus).
- Entra ID Conditional Access for macOS.
- Current Apple management trends (PSSO, macOS security/privacy).
Success Looks Like
- Reliable zero-touch from unbox to desktop.
- Fast, frictionless PSSO sign-in.
- Scalable packaging/patching with SLAs, rings, and rollback.
- Trusted CIS-aligned posture with clear Intune dashboards.
About ShiftCode Analytics
Sourced by ZipRecruiter
We specialize in solid end-to-end delivery of tailor-made technology solutions designed by the Top 1% Software Engineering teams. Our innate digital leadership identity powers transformation across every industry. We are always ready to drive meaningful change with a strategic vision for the future. We rigorously test for logical/mathematical reasoning skills, technical ability and soft skills in our interview process. Only those engineers who score highly across each of these areas are presented to our clients.
Industry
It services
Company size
11 - 50 Employees
Headquarters location
Tampa, FL, US
Year founded
2019