CyberArk Engineer

Salary: £? - ? per year

Requirements:

• Senior CyberArk engineer with genuine hands-on implementation experience, not just BAU support
• Proven delivery of upgrades, migrations, onboarding, policy design, connector development, and automation
• Experience with CyberArk Vault, PVWA, CPM, PSM, PSMP, PTA, CCP/AAM/AIM, and Conjur/Secret Manager
• Experience with Active Directory, Windows Server, Linux (RHEL), RDP, SSH, certificates, Azure, AWS, GCP, Entra ID, JIT, JEA, and Zero Standing Privilege
• Strong automation skills in PowerShell, REST API, Python, and Bash
• Experience in regulated enterprise environments; investment banking or financial services is ideal
• CyberArk Defender, Sentry, Guardian, CDE, Security+, or CISSP certifications are advantageous
• Strong oral and written communication skills
• Ability to work well under pressure
• Willingness to work across regions and provide occasional out-of-hours or weekend support

Responsibilities:

• Lead CyberArk SaaS migration and metadata clean-up as the SME
• Administer Vault, users, groups, policies, and security settings
• Automate onboarding, rotation, and decommissioning of privileged credentials
• Plan and deliver upgrades, health checks, and post-upgrade assurance
• Define Safes, RBAC, and master policies aligned to NIST and Zero Trust
• Build custom CPM/PSM connectors and automation scripts
• Provide SME-level support for incidents and troubleshooting
• Maintain HLD, LLD, and knowledge base documentation

Technologies:

• API
• AWS
• Active Directory
• Azure
• Bash
• GCP
• Support
• Linux
• PowerShell
• Python
• REST
• RBAC
• RHEL
• Security
• Sentry
• Windows
• Cloud
• DevOps

More:

We are a leading investment bank offering a senior contract opportunity for a CyberArk Implementation Engineer to support a major Privileged Access Management transformation across our enterprise infrastructure. This is a London-based hybrid role with three days onsite, on a 6-8 month contract, offered inside IR35 with a rate of up to £725 per day via umbrella. We are looking for someone who can contribute cross-region and provide occasional out-of-hours or weekend support as needed.

last updated 32 week of 2026