Job Description We are seeking a Senior CyberArk Endpoint Privilege Manager (EPM) Technical Lead with a specialized focus on application control to drive enterprise-wide implementation and optimization of CyberArk EPM for Windows endpoints. This role is pivotal in strengthening endpoint defenses by enforcing granular application control policies, reducing attack surfaces, and ensuring compliance with internal and external security standards. The ideal candidate will possess deep technical expertise in CyberArk EPM, particularly in designing and deploying application control frameworks that support least privilege access and secure software execution across diverse desktop and laptop environments.  Lead the design, deployment, and fine-tuning of CyberArk EPM application control policies for Windows-based endpoints.  Develop and enforce application whitelisting, blacklisting, and greylisting strategies to manage software execution and mitigate unauthorized application usage.  Collaborate with endpoint operations, security engineering, and automation teams to streamline policy rollout, enforcement, and exception handling.  Analyze application usage patterns and develop adaptive control policies that balance security with user productivity.  Integrate application control with broader endpoint protection strategies, including threat detection, behavioral analysis, and incident response workflows.  Conduct technical design reviews, resolve implementation challenges, and present solutions to stakeholders.  Continuously assess and improve application control effectiveness through metrics, reporting, and feedback loops. We are a company committed to creating inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity employer that believes everyone matters. Qualified candidates will receive consideration for employment opportunities without regard to race, religion, sex, age, marital status, national origin, sexual orientation, citizenship status, disability, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to Human Resources Request Form (https://airtable.com/app21VjYyxLDIX0ez/shrOg4IQS1J6dRiMo) . The EEOC "Know Your Rights" Poster is available here (https://www.eeoc.gov/sites/default/files/2023-06/22-088\_EEOC\_KnowYourRights6.12ScreenRdr.pdf) . To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/ . Skills and Requirements 3+ years of hands-on experience administering CyberArk Endpoint Privilege Manager (EPM) in large-scale Windows environments.  Proven expertise in Windows workstation and server management, with a focus on endpoint application control.  Experience managing EPM deployments at scale (10k+ endpoints; ideally 90k+).  Strong understanding of platform operations and application architecture.  Experience in environments without centralized software distribution (no software store) and ability to design compensating controls.  Demonstrated ability to lead technical teams and drive strategic security initiatives.  Excellent communication, documentation, and cross-functional collaboration skills. null We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion,sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military oruniformed service member status, or any other status or characteristic protected by applicable laws, regulations, andordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to HR@insightglobal.com.