CyberArk Engineer (Sentry Certified)

CyberArk Engineer – Financial Services

Robert Half are supporting a global consulting firm,, who have partnered with a major financial services organisation to source a CyberArk Engineer for a large-scale programme. This role is hands-on, focused on running, maintaining, upgrading, and enhancing CyberArk, alongside delivering change across the platform.

Assignment Details

• Initial 6-month contract (c.12–18 month programme)
• Hybrid working – London (2–3 days onsite, TBC)
• ASAP start
• Engagement via PAYE (due to end financial services client environment)

Key Responsibilities

• Plan, test, and deliver CyberArk upgrades (e.g. version releases)
• Manage monthly OS patching across Vault and supporting infrastructure
• Apply CyberArk patches to remediate security vulnerabilities
• Maintain and enhance existing connectors and integrations
• Build up to ~10 custom CPM and PSM connectors annually
• Maintain integrations (e.g. Saviynt SCIM, PowerBI telemetry)
• Collaborate with internal teams on configuration changes and new platform onboarding

Platform & Engineering

• Deploy and integrate CyberArk CP / CCP across environments
• Implement SSH key management processes (incl. rotation)
• Configure safes, platforms, and application authentication
• Support monitoring, testing, and hypercare activities
• Produce HLDs, LLDs, runbooks, and BAU documentation

Controls & Adoption

• Identify privileged accounts not under CyberArk control using discovery tools
• Produce monthly metrics on PAM coverage across infrastructure and directories
• Drive onboarding of privileged accounts and close control gaps

Secrets Management

• Assess existing secrets (keys, tokens, certificates, service accounts)
• Define and implement treatment plans (e.g. CP/CCP, PKI, mTLS approaches)
• Prioritise and deliver onboarding and remediation activities

Key Experience

• CyberArk Sentry certification (or above) essential
• Strong hands-on CyberArk SME experience across Vault, CPM, PSM, PSMP
• Proven experience delivering upgrades, patching, and platform maintenance
• Experience building custom connectors (CPM / PSM)
• Financial services / regulated environment experience required
• Comfortable operating across BAU and change delivery

All candidates must complete standard screening (Right to Work, DBS, credit/sanctions, employment verification).