CyberArk Identity Analyst

Position Summary

The Cybersecurity organization is seeking a

CyberArk Analyst

to maintain, support, and optimize our on-premises PAM infrastructure. This role is responsible for ensuring the security, availability, and operational excellence of our privileged access management (PAM) environment, which is critical to protecting sensitive assets and supporting business operations.

The successful candidate will oversee both physical and virtual infrastructure, manage application lifecycle and upgrades, maintain high availability and disaster recovery configurations, and enforce best practices in privileged access management. The role requires a strong understanding of the principle of least privilege, PAM concepts, and CyberArk-specific disciplines. The analyst will collaborate with internal stakeholders, respond to issues, advocate for developer integrations, and help drive continuous improvement in our security posture.

Qualified candidates need to be able to interact with services vendors, align strategy and execution to reduce risk, anticipate future requirements for complex environments, keep up with current security trends, be focused on results, and be a self-starter.

This role will directly support the company’s efforts to mitigate real and potential cyber threats to the company’s facilities, personnel, technology, operations, and brand – including critical electric and gas utility infrastructure and its privately owned telecommunications network.

Southern Company is headquartered in Atlanta, and we bring energy to homes and businesses across the country. We’ve made our name as a leading producer of clean, safe, reliable and affordable energy, and we approach each day as a vital step in building the future of energy. We’re always looking ahead, and our innovations in the industry – from new nuclear to deployment of electric transportation and renewables – to help brighten the lives and businesses of millions of customers nationwide. Our team is critical to building the future of energy with secure, resilient, and sustainable cyber solutions.

Defend. Protect. Enable.

Job Responsibilities

Administer, maintain, and optimize CyberArk components: Vaults, PSM, PSMP, CPM, and associated infrastructure (physical and virtual machines).

Ensure high availability, disaster recovery, and backup strategies for CyberArk systems.

Perform upgrades, patching, and lifecycle management of CyberArk applications.

Integrate new applications and platforms with CyberArk for secure credential management and session monitoring.

Enforce the principle of least privilege across privileged accounts and access workflows.

Monitor, triage, and escalate CyberArk-related issues, working with technology teams and business partners.

Implement and maintain security controls to meet regulatory requirements (e.g., SOX, NERC, FERC).

Develop and maintain operational documentation, standards, and policies for PAM.

Participate in audits and compliance activities related to privileged access.

Mentor team members and stakeholders on CyberArk and PAM best practices.

Stay current with CyberArk product updates, security trends, and emerging threats.

Lead and deliver CyberArk-related projects on time and within scope.

Provide expertise to enhance the organization’s security architecture and recommend improvements.

Required Requirements and qualifications:

Hands-on experience administering and supporting CyberArk PAM solutions (Vault, PSM, PSMP, CPM).

Strong understanding of privileged access management concepts and the principle of least privilege.

Experience with infrastructure management (Windows/Linux servers, virtualization platforms).

Familiarity with high availability, disaster recovery, and backup strategies for enterprise applications.

Ability to troubleshoot, resolve, and escalate complex technical issues – CyberArk or otherwise.

Must pass NERC CIP & Insider Threat Protection background checks.

Desired

Experience integrating applications and platforms with CyberArk.

Technical knowledge of Active Directory, PKI, and related authentication technologies.

Familiarity with scripting and automation (PowerShell, Python, etc.).

Industry certifications such as: CyberArk Defender, CyberArk Sentry, CISSP, CISA, GIAC, etc.

Experience with information security frameworks (COBIT, NIST, OWASP).

Knowledge of regulatory frameworks and compliance requirements (SOX, NERC, FERC).

Strong verbal communication and presentation skills.

Experience prioritizing and executing with minimal direction or oversight.

Familiarity with advanced threat actors and supply chain risks.

Location:

Georgia Power HQ - Atlanta, GA. or Alabama Power HQ - Birmingham, AL.

About Southern Company

Southern Company (NYSE: SO ) is a leading energy provider serving 9 million customers across the Southeast and beyond through its family of companies. Providing clean, safe, reliable and affordable energy with excellent service is our mission. The company has electric operating companies in three states, natural gas distribution companies in four states, a competitive generation company, a leading distributed energy solutions provider with national capabilities, a fiber optics network and telecommunications services. Through an industry-leading commitment to innovation, resilience and sustainability, we are taking action to meet customers' and communities' needs while advancing our goal of net-zero greenhouse gas emissions by 2050. Our uncompromising values ensure we put the needs of those we serve at the center of everything we do and are the key to our sustained success. We are transforming energy into economic, environmental and social progress for tomorrow. Our corporate culture has been recognized by a variety of organizations, earning the company awards and recognitions that reflect Our Values and dedication to service. To learn more, visit www.southerncompany.com .

Southern Company invests in the well-being of its employees and their families through a comprehensive total rewards strategy that includes competitive base salary, annual incentive awards for eligible employees and health, welfare and retirement benefits designed to support physical, financial, and emotional/social well-being. This position may also be eligible for additional compensation, such as an incentive program, with the amount of any bonus/awards subject to the terms and conditions of the applicable incentive plan(s). A summary of the benefits offered for this position can be found here https://seo.nlx.org/southernco/pdf/SOCO-Benefits.pdf . Additional and specific details about total compensation and benefits will also be provided during the hiring process.

Southern Company is an equal opportunity employer where an applicant's qualifications are considered without regard to race, color, religion, sex, national origin, age, disability, veteran status, genetic information, sexual orientation, gender identity or expression, or any other basis prohibited by law.

Job Identification: 16008

Job Category: Cybersecurity

Job Schedule: Full time

Company: Southern Company Services