CyberArk PAM Engineer

Robert Half Technology are assisting UK's market leading financial services organisation to recruit a CyberArk PAM Engineer on a 6-12 month contract basis - Hybrid working - London based

The CyberArk PAM Engineer will be responsible for designing, implementing, and operating privileged access management capabilities across cloud environments, with a focus on CyberArk Secure Cloud Access (SCA) and Secure Infrastructure Access (SIA).

Role

• The CyberArk PAM Engineer will build, configure, and operate CyberArk Secure Cloud Access (SCA) and Secure Infrastructure Access (SIA) platforms.
• Deliver secure, audited access to Azure and AWS environments through cloud consoles, command-line interfaces, RDP, and SSH.
• Implement and manage Zero Standing Privilege (ZSP), Just-in-Time (JIT) access, approval-based access controls, session monitoring, and auditing capabilities.
• Configure and manage CyberArk components including Connector Servers, Connector Management Agents, Management Pools, Network IDs, and supporting software.
• Define and implement access policies, platforms, and plugins for RDP and SSH access.
• Design and implement privileged access controls for cloud-hosted infrastructure and, where applicable, database platforms including Microsoft SQL Server, Oracle, and PostgreSQL.
• Design and deploy credential lifecycle management and password rotation controls using CyberArk Secrets Rotation Service (SRS) across Windows and Linux platforms.
• Develop scripts and automation solutions to support operational activities and onboarding processes using APIs and infrastructure-as-code approaches.
• Work closely with PAM Developers to define and implement automated onboarding and approval workflows, including Terraform and ServiceNow integrations.
• Integrate privileged access governance processes with ServiceNow to provide approval traceability, audit evidence, and operational efficiency.
• Define, document, and maintain PAM standards, onboarding patterns, policies, runbooks, and operational procedures.
• Support compliance, governance, assurance, and audit activities.
• Collaborate with Cloud, Security, Identity, Infrastructure, Network, and third-party delivery teams to deliver PAM services across the organisation.
• Act as a technical lead for privileged access patterns and best practices within complex cloud environments.

Profile

• The CyberArk PAM Engineer will have hands-on experience with CyberArk Secure Cloud Access (SCA).
• Hands-on experience with CyberArk Secure Infrastructure Access (SIA).
• Proven experience delivering privileged access management solutions within Azure and/or AWS environments.
• Strong understanding of cloud access models, web-based console access, ephemeral access, Zero Standing Privilege, and credential lifecycle management.
• Experience implementing approval-driven access controls and governance workflows.
• Strong knowledge of CyberArk PAM SaaS capabilities and privileged access best practices.
• Experience designing and implementing secure access policies, authentication controls, and privileged access governance frameworks.
• Ability to work across multiple access protocols and technologies, including HTTPS, SSH, and RDP.
• Strong design, implementation, and operational support capabilities.
• Excellent stakeholder management and collaboration skills across security, cloud, infrastructure, and engineering teams.

Company

• UK's market leading financial services organisation with offices in London
• Hybrid working

Salary & Benefits

The salary range/rates of pay is dependent upon your experience, qualifications or training.

Robert Half Ltd acts as an employment business for temporary positions and an employment agency for permanent positions. Robert Half is committed to diversity, equity and inclusion. Suitable candidates with equivalent qualifications and more or less experience can apply. Rates of pay and salary ranges are dependent upon your experience, qualifications and training. If you wish to apply, please read our Privacy Notice describing how we may process, disclose and store your personal data: