CyberArk SME - Wokingham - 6 months - Inside IR35
CyberArk SME - Wokingham - 6 months - Inside IR35
Role Overview
A hands-on CyberArk Subject Matter Expert to own, manage, and continuously enhance a CyberArk PAM platform end-to-end. The role is the primary technical authority for the platform, combining operational expertise with architectural understanding across security, infrastructure, application, and compliance teams. It carries significant stakeholder engagement, leadership, and platform strategy responsibility.
Key Responsibilities
- Own and manage the CyberArk PAM platform end-to-end (PVWA, CPM, PSM/PSM-SSH, Vault), covering daily operations, incident resolution, upgrades, patching, hardening, health checks, and DR testing.
- Manage the full privileged access lifecycle, including onboarding and offboarding, password vaulting, rotation, reconciliation, and session monitoring across Windows, Linux/Unix, network devices, databases, Azure, and DevOps accounts.
- Integrate CyberArk with Active Directory/LDAP, Sentinel, ServiceNow, and Azure AD, and build automation using REST APIs, PowerShell, and Python.
- Act as SME for PAM best practices, Zero Trust, and least privilege, supporting audits and producing compliance evidence.
- Lead troubleshooting of complex PAM issues, contribute to architecture and roadmap decisions, and mentor junior team members.
Top 5 Skills
- CyberArk PAM expertise: 7+ years in IAM with 5+ years hands-on CyberArk (Self-Hosted, PCloud and/or EPM), including Vault hardening, CPM, and PSM/PSM-SSH.
- Complex onboarding: Experience onboarding Legacy and modern environments, with a solid grasp of Windows, Linux/Unix, AD, and networking.
- Scripting and integration: PowerShell and CyberArk REST API experience, ideally with Python and Secrets Management for CI/CD.
- Production support: Strong L2/L3 experience in 24x7 enterprise PAM environments with strict SLAs.
- Stakeholder leadership: Strong communicator who can explain complex security topics to non-technical audiences. CyberArk Defender or Sentry certification and energy sector experience are desirable.
Contract Details:
- Rate: £600 per day Inside IR35
- Location: On Site in Wokingham
- Duration: 6 Month Initial Contract