CyberArk SME - On Site in Wokingham - 6 Month Initial Contract - Inside IR35

CyberArk SME - On Site in Wokingham - 6 Month Initial Contract - Inside IR35

Role Overview

A highly skilled and hands-on CyberArk Subject Matter Expert to own, manage, and continuously enhance a CyberArk PAM platform end-to-end. The position acts as the primary technical authority for the PAM platform, combining strong operational expertise with architectural understanding across security, infrastructure, application, and compliance functions. The role carries significant stakeholder engagement, leadership, and platform strategy responsibilities within a regulated enterprise environment.

Key Responsibilities

• Own and manage the CyberArk PAM platform end-to-end, including PVWA, CPM, PSM/PSM-SSH, and Vault, performing daily operations, incident resolution, upgrades, patching, and health checks.
• Manage the full privileged access life cycle including account onboarding and offboarding, password vaulting, rotation, reconciliation, and session monitoring and auditing across Windows, Linux, databases, Azure, and DevOps environments.
• Integrate CyberArk with enterprise platforms including Active Directory/LDAP, Microsoft Sentinel, ServiceNow, and Azure AD, developing and maintaining automation scripts via REST APIs, PowerShell, and Python.
• Act as SME for PAM best practices, Zero Trust principles, and least privilege, supporting internal and external audits and producing compliance reports and evidence.
• Lead troubleshooting of complex, high-impact PAM issues, contribute to architecture decisions and platform roadmaps, and mentor junior team members.

Top 5 Skills

• CyberArk PAM expertise - 7+ years in IAM with 5+ years hands-on CyberArk experience across PAM Self-Hosted, PCloud, EPM, Vault administration, CPM password life cycle management, and PSM/PSM-SSH configuration and troubleshooting; CyberArk Defender or Sentry certification strongly preferred.
• Privileged access life cycle management - Proven experience onboarding and managing complex privileged environments across Legacy and modern platforms including Windows, Linux/Unix, network devices, databases, Azure, and DevOps/service accounts.
• Integration & automation - Strong experience integrating CyberArk with SIEM, ITSM, and identity platforms, with hands-on PowerShell and Python Scripting capability using CyberArk REST APIs and CI/CD Secrets Management.
• Operational & production support - Strong L2/L3 support experience in 24x7 enterprise PAM environments, with proven ability to manage incident, problem, and change management effectively within strict SLA frameworks.
• Stakeholder engagement & technical leadership - Excellent communication skills with the ability to explain complex security topics to non-technical audiences, lead architecture discussions, and drive platform strategy within a regulated environment; prior experience in the energy sector is a strong advantage.

Contract Details

• Rate: £600 per day Inside IR35
• Location: On Site in Wokingham
• Duration: Initial 6 Month Contract