CyberArk PAM Engineer
550 Daily
CyberArk PAM Engineer - sought by investment bank based in London - Contract - Hybrid
*inside IR35*
Key Responsibilities
- Lead the design, implementation, and optimisation of CyberArk PAM solutions.
- Manage CyberArk components including Vault, CPM, PSM, PSMP, CCP, PTA, AIM.
- Plan and execute major version upgrades and migrations.
- Automate credential onboarding, rotation, and decommissioning.
- Develop and maintain Safes, RBAC structures, and master policies aligned to NIST 800-53 and Zero Trust.
- Build custom connectors for non-standard platforms (eg, Oracle Cloud).
- Provide SME-level support and troubleshooting across CyberArk environments.
- Integrate CyberArk with DevOps pipelines using AIM/AAM/Conjur.
- Maintain documentation and deliver training to internal teams.
Required Skills & Experience
- 10+ years of hands-on experience with CyberArk PAM suite.
- Strong knowledge of privileged access concepts, RBAC, and compliance frameworks (NIST, ISO 27001).
- Experience with Linux (RHEL 9), Windows Server, Oracle DB, and cloud platforms.
- Scripting and automation skills (PowerShell, REST APIs).
- Proven track record in CyberArk upgrades and custom integrations.
- Excellent communication and stakeholder engagement skills.
Desirable
- Experience in financial services or banking environments.
- Familiarity with Sentinel, Defender XDR, and SIEM integrations.
- CyberArk Defender & Sentry certifications.
Please apply within for further details - Matt Holmes, Harvey Nash