Cyber Ark SME

If you need support in completing the application or if you require a different format of this document, please get in touch with at UKI.recruitment@tcs.com or call TCS London Office number 02031552100 / +44 204 520 2575 with the subject line: “Application Support Request”.

The Role: CyberArk SME

Location: Wokingham / Warwick

Job Type: Permanent

Are You Experienced in Privileged Access Management?

We Have a Great Opportunity for You - CyberArk SME!

Careers at TCS: It means more

TCS is a purpose-led transformation company, built on belief. We do not just help businesses to transform through technology. We support them in making a meaningful difference to the people and communities they serve - our clients include some of the biggest brands in the UK and worldwide. For you, it means more to make an impact that matters, through challenging projects which demand ambitious innovation and thought leadership.

• Take ownership of a critical enterprise‐wide Privileged Access Management platform.
• Work hands‐on with market‐leading security technology in a highly regulated environment.
• Play a key role in strengthening security posture and reducing organisational cyber risk.

The Role

As a CyberArk Subject Matter Expert, you will own, manage, and continuously enhance the CyberArk Privileged Access Management platform end to end. You will act as the primary technical authority for PAM, ensuring platform availability, security posture, scalability, and compliance with enterprise risk and regulatory requirements. You will work closely with security, infrastructure, application, and compliance teams, providing expert leadership, driving best practices, and supporting complex integrations. This is a critical onshore role requiring strong stakeholder engagement, problem‐solving skills, and technical leadership.

Key responsibilities:

• Own and manage the CyberArk PAM platform end to end, including PVWA, CPM, PSM, PSM SSH, and Vault.
• Ensure high availability, stability, scalability, and performance of the CyberArk environment.
• Perform platform maintenance activities including upgrades, patching, hardening, health checks, and disaster recovery testing.
• Manage onboarding and lifecycle management of privileged accounts across servers, databases, applications, cloud, and DevOps environments.
• Configure password vaulting, rotation, reconciliation, session monitoring, recording, and auditing.
• Integrate CyberArk with Active Directory, identity platforms, SIEM tools, ticketing tools, and enterprise systems.
• Develop and support automation using CyberArk REST APIs and PowerShell or Python scripting.
• Act as the primary escalation point for complex PAM incidents and technical issues.
• Support internal and external audits by producing compliance evidence and reports.
• Provide technical leadership, mentoring, and knowledge transfer to team members and stakeholders.

Your Profile

Essential skills/knowledge/experience:

• Strong experience in Identity and Access Management with at least 5 years of hands‐on CyberArk PAM experience.
• Strong expertise in CyberArk PAM Self‐Hosted and/or PAM as a Service implementation.
• Proven experience administering and hardening CyberArk Vault environments.
• Hands‐on experience with CPM configuration and password lifecycle management.
• Strong working knowledge of PSM and PSM SSH configuration and troubleshooting.
• Experience onboarding complex, legacy, and hybrid environments.
• Solid understanding of Windows, Linux/Unix, Active Directory, and networking fundamentals.
• Experience using PowerShell scripting and CyberArk REST APIs for automation.
• Strong L2/L3 operational support experience in enterprise PAM environments.
• Excellent communication, stakeholder management, and problem‐solving skills.

Desirable skills/knowledge/experience:

• CyberArk certifications such as CyberArk Defender, Sentry, PAM CDE, or EPM.
• Experience with CyberArk Endpoint Privilege Manager and Secrets Management.
• Exposure to Zero Trust architecture and cloud‐native PAM patterns.
• Experience supporting DevSecOps, CI/CD pipelines, or containerised environments.
• Prior experience working in regulated industries such as the energy sector.
• Experience delivering PAM transformation or platform refresh programmes.

Rewards & Benefits

TCS is consistently voted a Top Employer in the UK and globally. Our competitive salary packages feature pension, health care, life assurance, laptop, phone, access to extensive training resources and discounts within the larger Tata network.

We offer health & wellness initiatives and sports events; we are the proud sponsor of the London Marathon.

Diversity, Inclusion and Wellbeing

Tata Consultancy Services UK&I is committed to meeting the accessibility needs of all individuals in accordance with the UK Equality Act 2010 and the UK Human Rights Act 1998.

We welcome and embrace diversity in race, nationality, ethnicity, disability, neurodiversity, gender identity, age, physical ability, gender reassignment, sexual orientation. We are a disability inclusive employer and encourage disabled people to apply for this role.

As a Disability Confident Employer, we offer an interview to applicants with disabilities or long-term conditions who meet the minimum criteria for the role. Please email us at UKI.recruitment@tcs.com if you would like to opt in.

If you are an applicant who needs any adjustments to the application process or interview, please contact us at UKI.recruitment@tcs.com with the subject line: “Adjustment Request” or call TCS London Office 02031552100 / +44 204 520 2575 to request an adjustment. We welcome requests prior to you completing the application and at any stage of the recruitment process.

Next Steps:

Application Process (optional)

1. Online application: You can apply directly through LinkedIn/ by uploading your CV. In case you wish to submit your application via another format like audio/video, please, contact - UKI.recruitment@tcs.com
2. Skill-Based discussion: This will be a level 1 interview with the project team, it can be via video or in-person. Details will be confirmed by your recruiter.
3. Managerial discussion: This discussion will focus on behavioural aspects and person-organisation fit.
4. HR Discussion: This will be with one of the members of the HR team and will cover your career journey, aspirations for growth, compensation and any other questions you may have.

Beware of Fraudulent offers

This is to notify you that TCS does not ask for any sort of payment or security deposit from candidates at any stage of the recruitment process. The firm never sends out job offers from free internet email services like Gmail, Yahoo Mail, and so on. TCS has not authorised any third-party company to collect money on their behalf. As a vigilant job seeker, beware of fraudulent recruitment activity and protect your interests! You can write to UKI.recruitment@tcs.com to report any fraudulent activity.

Due to the high volume of applications, we will be unable to contact each applicant individually on the status of their application. If you have not received a direct response within 30 days, then it should be deemed unsuccessful on this occasion.

Join us and do more of what matters. Apply online now.