CyberArk Implementation Engineer / PAM Engineer

Scot Lewis Associates; Greater London; Hybrid; GBP 80,000 - 134,000; Full time

Job summary

Scot Lewis Associates are working with a leading investment banking client in London to recruit a Senior CyberArk PAM Engineer. You will lead design, implementation and optimisation of CyberArk solutions across the bank’s infrastructure, with hands-on delivery and transformation experience.

This 6-month contract is hybrid (2–3 days in the London office) paying £725 per day Inside IR35. You will administer Vault, PVWA, CPM/PSM, and connectors, automate credential management, and support PAM

Qualifications

• Extensive hands-on CyberArk implementation and transformation experience.
• Experience with Vault/PAS, PVWA, CPM, PSM, PSMP, PTA, CCP/AAM, and Privilege Cloud.
• Experience in regulated financial services and audit/compliance.

Responsibilities

• Support SaaS migration, metadata cleanup, and major PAM transformation projects.
• Administer CyberArk Vault, users, groups, safes, policies, RBAC, and security settings.
• Automate credential management: onboarding, rotation, decommissioning.

Skills

CyberArk PAM

PowerShell

Python

Bash

REST APIs

Azure

AWS

GCP

Entra ID

Zero Trust

Tools

PVWA

CPM

PSM

PSMP

PTA

CCP/AAM

Privileged Cloud/SaaS

Job description

We are working with a leading investment banking client based in London to secure for them a PAM (privileged access management ) / CyberArk SME. We are looking for highly experienced CyberArk PAM Engineer to lead the design, implementation, and optimisation of CyberArk solutions across the banks infrastructure.

This is an initial 6 month contract paying £725 per day (Inside IR35), hybrid working (2/3 days a week in the London office).

• Senior CyberArk PAM Engineer with strong hands‑on implementation and transformation experience, not just BAU support.
• Extensive experience across CyberArk Vault/PAS, PVWA, CPM, PSM, PSMP, PTA, CCP/AAM and Privilege Cloud/SaaS.
• Proven delivery of CyberArk migrations, upgrades, discovery, onboarding, password rotation and policy design.
• Strong experience developing and supporting PSM/CPM connection components, including custom connectors and troubleshooting.
• Solid infrastructure knowledge across Active Directory, Windows Server, Linux/RHEL, RDP, SSH, service accounts and certificates.
• Strong automation and scripting skills using PowerShell, Python, Bash and REST APIs, with experience across Azure, AWS/GCP and Entra ID.
• Experience working in regulated enterprise environments, ideally financial services, with strong understanding of audit, compliance, Zero Trust, JIT/JEA and Zero Standing Privilege.

Responsibilities:

• CyberArk SME supporting SaaS migration, metadata clean‑up and major PAM transformation projects.
• Administer and maintain CyberArk Vault, including users, groups, Safes, policies, RBAC and security settings.
• Automate privileged credential management, including onboarding, rotation and decommissioning of accounts.
• Deliver CyberArk upgrades, health checks and assurance, alongside developing and supporting CPM/PSM connectors.
• Provide technical SME support across incidents, troubleshooting, documentation and knowledge sharing, including mentoring junior team members.

Keywords: CyberArk Implementation Engineer, CyberArk SME, CyberArk Implementation SME, PAM Engineer, PAM, CyberArk implementation, Data Cleansing, Automation, Python or PowerShell, IDM, Active Directory, Linux, Azure, AWS, GCP, Bank, Banking, Investment bank.