CyberArk PAM Engineer

Harvey Nash Group; City Of London; Hybrid; GBP 80,000 - 100,000; Part time

Job summary

A financial services consultancy based in London is seeking a CyberArk PAM Engineer for a contract role. The role involves leading the design and implementation of CyberArk PAM solutions with a strong focus on integrations and compliance. Candidates should have over 10 years of experience in CyberArk PAM suite and excellent communication skills. The position offers a hybrid work model.

Qualifications

• 10+ years of hands-on experience with CyberArk PAM suite.
• Strong knowledge of privileged access concepts, RBAC, and compliance frameworks.
• Proven track record in CyberArk upgrades and custom integrations.

Responsibilities

• Lead the design, implementation, and optimisation of CyberArk PAM solutions.
• Manage CyberArk components including Vault, CPM, PSM, and others.
• Integrate CyberArk with DevOps pipelines.

Skills

CyberArk PAM suite

Privileged access concepts

Scripting (PowerShell, REST APIs)

Stakeholder engagement

Experience with Linux and Windows Server

Job description

CyberArk PAM Engineer - sought by investment bank based in London - Contract - Hybrid

*inside IR35*

Key Responsibilities

• Lead the design, implementation, and optimisation of CyberArk PAM solutions.
• Manage CyberArk components including Vault, CPM, PSM, PSMP, CCP, PTA, AIM.
• Plan and execute major version upgrades and migrations.
• Automate credential onboarding, rotation, and decommissioning.
• Develop and maintain Safes, RBAC structures, and master policies aligned to NIST 800-53 and Zero Trust.
• Build custom connectors for non-standard platforms (e.g., Oracle Cloud).
• Provide SME-level support and troubleshooting across CyberArk environments.
• Integrate CyberArk with DevOps pipelines using AIM/AAM/Conjur.
• Maintain documentation and deliver training to internal teams.

Required Skills & Experience

• 10+ years of hands‑on experience with CyberArk PAM suite.
• Strong knowledge of privileged access concepts, RBAC, and compliance frameworks (NIST, ISO 27001).
• Experience with Linux (RHEL 9), Windows Server, Oracle DB, and cloud platforms.
• Scripting and automation skills (PowerShell, REST APIs).
• Proven track record in CyberArk upgrades and custom integrations.
• Excellent communication and stakeholder engagement skills.

Desirable

• Experience in financial services or banking environments.
• Familiarity with Sentinel, Defender XDR, and SIEM integrations.
• CyberArk Defender & Sentry certifications.

Please apply within for further details - Matt Holmes, Harvey Nash