CyberArk Security Engineer

MM International, LLC; Greater London; On-site; GBP 70,000 - 110,000; Full time

Job summary

MM International, LLC is seeking an experienced CyberArk Security Engineer to secure and manage privileged accounts across the organization. You will work with the CyberArk PAM platform to protect administrator accounts, manage passwords, control privileged access, and monitor privileged sessions.

The ideal candidate has hands-on CyberArk PAM/PAS experience with PVWA, CPM, PSM, and Vault, plus strong RBAC, MFA, AD integration, and scripting skills in PowerShell or Python to automate tasks.

Qualifications

• 8+ years of hands-on CyberArk experience.
• Hands-on CyberArk PAM/PAS experience with PVWA, CPM, PSM, and Vault.
• Experience onboarding privileged accounts and managing Safes and access policies.
• Knowledge of password rotation, reconciliation, and privileged session management.
• Strong understanding of IAM, RBAC, PAM, and least privilege, plus AD integration.

Responsibilities

• Manage and support the organization's CyberArk PAM/PAS environment.
• Onboard administrator and other privileged accounts into CyberArk.
• Create and manage CyberArk Safes and permissions.
• Configure password policies, password rotation, and reconciliation.
• Manage CyberArk components including PVWA, CPM, PSM, and Vault.
• Configure and monitor privileged user sessions through PSM.
• Manage user access using RBAC and least-privilege principles.
• Integrate CyberArk with Active Directory, LDAP, SSO, and MFA.
• Troubleshoot CyberArk authentication, access, password, and connectivity issues.
• Support integration of CyberArk with SIEM and security monitoring tools.
• Help identify and resolve privileged-access security issues.
• Support CyberArk upgrades, patches, and configuration changes.
• Automate CyberArk tasks using PowerShell, Python, or REST APIs.
• Work with IAM, cybersecurity, infrastructure, application, and cloud teams.
• Create and maintain CyberArk security documentation and procedures.
• Support security audits and compliance requirements related to privileged access.

Skills

CyberArk experience

RBAC

MFA

Active Directory

Windows

Linux

PAM/PAS

PVWA

CPM

PSM

CyberArk Vault

Safes and permissions

Password rotation

Privileged session

PowerShell

Python

REST APIs

SIEM integration

Audit/compliance

Tools

PVWA

CPM

PSM

CyberArk Vault

Active Directory

Job description

We are looking for an experienced CyberArk Security Engineer to help secure and manage privileged accounts across the organization. The candidate will work with the CyberArk PAM platform to protect administrator accounts, manage passwords, control privileged access, and monitor privileged sessions.

The ideal candidate should have strong hands-on experience with CyberArk PAM/PAS, PVWA, CPM, PSM, and CyberArk Vault.

Responsibilities

• Manage and support the organization's CyberArk PAM/PAS environment.
• Onboard administrator and other privileged accounts into CyberArk.
• Create and manage CyberArk Safes and permissions.
• Configure password policies, password rotation, and reconciliation.
• Manage CyberArk components including PVWA, CPM, PSM, and Vault.
• Configure and monitor privileged user sessions through PSM.
• Manage user access using RBAC and least-privilege principles.
• Integrate CyberArk with Active Directory, LDAP, SSO, and MFA.
• Troubleshoot CyberArk authentication, access, password, and connectivity issues.
• Support integration of CyberArk with SIEM and security monitoring tools.
• Help identify and resolve privileged-access security issues.
• Support CyberArk upgrades, patches, and configuration changes.
• Automate CyberArk tasks using PowerShell, Python, or REST APIs.
• Work with IAM, cybersecurity, infrastructure, application, and cloud teams.
• Create and maintain CyberArk security documentation and procedures.
• Support security audits and compliance requirements related to privileged access.

Required Skills

• 8+ years of hands-on CyberArk experience.
• Strong experience with CyberArk PAM/PAS.
• Hands-on experience with:
• PVWA
• CPM
• PSM
• CyberArk Vault
• Experience onboarding privileged accounts.
• Experience with Safes, permissions, and access policies.
• Experience with password rotation and reconciliation.
• Experience with privileged session management.
• Good understanding of IAM, RBAC, PAM, and least privilege.
• Experience with Active Directory.
• Knowledge of Windows and Linux environments.
• Understanding of MFA, SSO, and authentication.
• Strong troubleshooting and problem-solving skills.

Preferred Skills

• CyberArk Defender or Sentry certification.
• Experience with CyberArk Conjur / Secrets Management.
• Experience with Azure or AWS.
• Experience with Splunk, Microsoft Sentinel, or other SIEM tools.
• Experience with PowerShell, Python, or REST APIs.
• Experience with CyberArk upgrades and migrations.
• Knowledge of security standards and compliance requirements.