CyberArk PAM Engineer - Inside IR35 - Up to £700 per day

CyberArk PAM Engineer

Inside IR35 - Up to £700 per day

Hybrid in Central London

We are seeking an experienced CyberArk PAM Engineer to lead the design, implementation, and optimisation of CyberArk solutions across the enterprise. You will act as the technical SME for CyberArk, supporting SaaS migrations, platform upgrades, privileged access automation, and security governance initiatives,

Key Responsibilities

• Administer and maintain CyberArk PAM environments (Vault, PVWA, CPM, PSM, PSMP, AAM/CCP)
• Lead CyberArk SaaS migrations, upgrades, health checks, and compliance validation
• Automate onboarding, rotation, and decommissioning of privileged accounts, service accounts, certificates, and SSH keys
• Design and manage Safes, RBAC models, policies, and workflows aligned to Zero Trust and NIST standards
• Develop custom integrations, CPM/PSM connectors, and API-driven automation solutions
• Provide SME support for CyberArk incidents, operational activities, documentation, and mentoring junior team member

Required Experience

• 10+ years' experience with CyberArk PAM, including SaaS, EPM, JIT/ZSP, SCA, and SIA.
• Strong expertise in privileged access management across Azure, AWS, GCP, and on-premises environments.
• Proven experience integrating CyberArk with enterprise infrastructure, ServiceNow, and automation frameworks.
• Strong Windows, Linux, Active Directory, networking, scripting, and CI/CD knowledge.
• Experience within highly regulated environments, ideally Financial Services

Certifications

• CyberArk Defender, Sentry, Guardian and/or CDE certifications preferred.