Cyberark Security Engineer

Mm International; Warwick; On-site; GBP 70,000 - 110,000; Full time

Job summary

Mm International is seeking an experienced CyberArk Security Engineer to secure and manage privileged accounts across the organization. Based in Warwick, United Kingdom, you will work with CyberArk PAM/PAS, PVWA, CPM, PSM and Vault to protect administrator accounts and monitor privileged sessions.

You will onboard privileged accounts, manage Safes and permissions, enforce password rotation, and integrate CyberArk with AD/LDAP/SSO/MFA while collaborating with IAM, security operations and cloud

Qualifications

• 8+ years of hands-on CyberArk experience.
• Strong experience with CyberArk PAM/PAS, PVWA, CPM, PSM, and Vault.
• Experience onboarding privileged accounts and managing Safes, permissions, and access policies.
• Experience with password rotation and reconciliation and privileged session management.
• Familiarity with IAM, RBAC, PAM, least privilege, Active Directory, Windows and Linux.
• Understanding MFA, SSO, authentication and incident troubleshooting.

Responsibilities

• Manage and support the organization's CyberArk PAM/PAS environment.
• Onboard administrator and other privileged accounts into CyberArk.
• Create and manage CyberArk Safes and permissions.
• Configure password policies, password rotation, and reconciliation.
• Manage CyberArk components including PVWA, CPM, PSM, and Vault.
• Configure and monitor privileged user sessions through PSM.
• Manage user access using RBAC and least-privilege principles.
• Integrate CyberArk with Active Directory, LDAP, SSO, and MFA.
• Troubleshoot CyberArk authentication, access, password, and connectivity issues.
• Support integration of CyberArk with SIEM and security monitoring tools.
• Help identify and resolve privileged-access security issues.
• Support CyberArk upgrades, patches, and configuration changes.
• Automate CyberArk tasks using PowerShell, Python, or REST APIs.
• Work with IAM, cybersecurity, infrastructure, application, and cloud teams.
• Create and maintain CyberArk security documentation and procedures.
• Support security audits and compliance requirements related to privileged access.

Skills

CyberArk

PAM/PAS

PVWA

CPM

PSM

Vault

Onboarding

Safes

Password rotation

RBAC

MFA/SSO

Active Directory

Windows

Linux

Troubleshooting

Job description

We are looking for an experienced CyberArk Security Engineer to help secure and manage privileged accounts across the organization. The candidate will work with the CyberArk PAM platform to protect administrator accounts, manage passwords, control privileged access, and monitor privileged sessions.

The ideal candidate should have strong hands-on experience with CyberArk PAM/PAS, PVWA, CPM, PSM, and CyberArk Vault.

Responsibilities

• Manage and support the organization's CyberArk PAM/PAS environment.
• Onboard administrator and other privileged accounts into CyberArk.
• Create and manage CyberArk Safes and permissions.
• Configure password policies, password rotation, and reconciliation.
• Manage CyberArk components including PVWA, CPM, PSM, and Vault.
• Configure and monitor privileged user sessions through PSM.
• Manage user access using RBAC and least-privilege principles.
• Integrate CyberArk with Active Directory, LDAP, SSO, and MFA.
• Troubleshoot CyberArk authentication, access, password, and connectivity issues.
• Support integration of CyberArk with SIEM and security monitoring tools.
• Help identify and resolve privileged-access security issues.
• Support CyberArk upgrades, patches, and configuration changes.
• Automate CyberArk tasks using PowerShell, Python, or REST APIs.
• Work with IAM, cybersecurity, infrastructure, application, and cloud teams.
• Create and maintain CyberArk security documentation and procedures.
• Support security audits and compliance requirements related to privileged access.

Required Skills

• 8+ years of hands-on CyberArk experience.
• Strong experience with CyberArk PAM/PAS.
• Hands-on experience with:
• PVWA
• CPM
• PSM
• CyberArk Vault
• Experience onboarding privileged accounts.
• Experience with Safes, permissions, and access policies.
• Experience with password rotation and reconciliation.
• Experience with privileged session management.
• Good understanding of IAM, RBAC, PAM, and least privilege.
• Experience with Active Directory.
• Knowledge of Windows and Linux environments.
• Understanding of MFA, SSO, and authentication.
• Strong troubleshooting and problem-solving skills.

Preferred Skills

• CyberArk Defender or Sentry certification.
• Experience with CyberArk Conjur / Secrets Management.
• Experience with Azure or AWS.
• Experience with Splunk, Microsoft Sentinel, or other SIEM tools.
• Experience with PowerShell, Python, or REST APIs.
• Experience with CyberArk upgrades and migrations.
• Knowledge of security standards and compliance requirements.

CyberArk Security Engineer • Warwick, United Kingdom