CyberArk PAM L2 Support Engineer – Banking

Salt; Greater London; Hybrid; GBP 74,000 - 111,000; Full time

Job summary

Salt is seeking an experienced CyberArk PAM Support Engineer (L2) to join its IAM Operations team within a major banking/financial services environment. The role is hands-on, focused on maintaining and troubleshooting an enterprise CyberArk PAM setup (PVWA, CPM, PSM, Vault) with strong incident resolution and BAU operations.

Ideal candidates have 3–5 years IT/security experience, 2–3 years with PAM, and familiar with AD/LDAP, ITIL processes, and ServiceNow.

Qualifications

• Hands-on technical support for CyberArk PAM in production.

Responsibilities

• Provide second-line (L2) technical support for CyberArk PAM platform.

Skills

Troubleshooting

Incident resolution

Communication

Tools

CyberArk

PVWA

CPM

PSM

Vault

AAM

ServiceNow

Active Directory

LDAP

Job description

CyberArk PAM Support Engineer (L2) - Banking Contract Opportunity | Financial Services | Hybrid Working Rate: £400 - £600 per day (inside of IR35) 12 month contract We are supporting a leading international financial services organisation seeking an experienced CyberArk PAM Support Engineer (L2) to join its Identity and Access Management (IAM) Operations team. This is a hands-on technical support position focused on maintaining, troubleshooting and improving an enterprise CyberArk Privileged Access Management (PAM) environment. The successful candidate will have strong CyberArk administration and troubleshooting experience, with a particular focus on PVWA, CPM, PSM and Vault, alongside a genuine interest in production support, incident resolution and BAU operations. This is not primarily an architecture or implementation role. We are looking for someone who enjoys investigating technical issues, resolving incidents and ensuring the stability and security of critical PAM services.

Key Responsibilities

• Provide second-line (L2) technical support for the CyberArk PAM platform, ensuring service availability, stability and security.
• Investigate, troubleshoot and resolve incidents involving CyberArk components, including PVWA, CPM, PSM and Vault.
• Diagnose password rotation failures, reconciliation issues, privileged session connectivity problems and authentication errors.
• Support privileged account onboarding, safes administration, access permissions and platform configuration.
• Monitor CyberArk platform health, investigate recurring incidents and contribute to root cause analysis.
• Manage incidents, service requests, problems and changes through ServiceNow in accordance with ITIL processes.
• Support vulnerability remediation, security patching, platform upgrades and production releases.
• Collaborate with third-line engineering, infrastructure, application and security teams to resolve complex technical issues.
• Maintain operational documentation, troubleshooting guides, knowledge articles and standard operating procedures.
• Support Active Directory and LDAP integrations within the PAM environment.
• Contribute to continuous improvement initiatives to enhance service reliability, operational efficiency and security.
• Participate in on-call support arrangements if required.

Essential Skills and Experience

• Approximately 3-5 years of relevant IT/security experience, ideally including 2-3 years working with PAM technologies.
• Strong hands-on experience administering and supporting CyberArk in a production environment.
• Practical knowledge of core CyberArk components: PVWA: Privileged access administration, authentication and troubleshooting. CPM: Password management, rotation, reconciliation and incident resolution. PSM: Privileged session management, connection troubleshooting and operational support. Vault: Privileged credential storage, safes management and platform administration.
• Familiarity with CyberArk Application Access Manager (AAM).
• Experience investigating and resolving L2 incidents rather than solely processing access requests.
• Strong knowledge of Active Directory, LDAP and privileged access management principles.
• Experience using ServiceNow or a comparable IT service management platform.
• Understanding of incident, problem, change and vulnerability management processes.
• Experience supporting production environments, including patching, upgrades and release activities.
• Strong analytical, troubleshooting and communication skills.

Desirable Experience

• Experience with SailPoint or other Identity Governance and Administration (IGA) solutions.
• Knowledge of Microsoft Entra ID / Azure Active Directory.
• Experience supporting PAM platforms within banking, financial services or other regulated environments.
• Familiarity with mainframe environments or financial market infrastructure.
• CyberArk certifications or relevant security qualifications.
• Scripting or automation experience using PowerShell or similar technologies.

The Ideal Candidate

• Enjoy hands-on technical troubleshooting and resolving complex production issues.
• Have practical experience supporting CyberArk within a live enterprise environment.
• Are comfortable taking ownership of L2 incidents and working with L3 teams when required.
• Understand the importance of operational stability, security and service continuity.
• Want to develop their expertise within CyberArk operations rather than move immediately into architecture or project delivery.

*Rates depend on experience and client requirements