CyberArk SME

Project Global Limited; Wokingham; On-site; GBP 92,000 - 148,000; Full time

Job summary

Project Global Limited is seeking a CyberArk Subject Matter Expert to own, manage, and continuously enhance the CyberArk PAM platform from PVWA to Vault at the client site in Wokingham, UK. This is a fully on-site 6+ month contract with a competitive day rate.

The role requires strong operational expertise, architectural understanding, and collaboration with security, infrastructure, application, and compliance teams to maintain high availability and security posture.

Qualifications

• 7+ years in Identity & Access Management with 5+ years hands-on CyberArk PAM experience.
• Proven expertise across CyberArk PAM components: Self Hosted, PCloud and/or EPM.
• Vault administration and hardening; CPM and password lifecycle management.
• PSM/PSM-SSH configuration and troubleshooting; REST APIs usage.
• Experience onboarding complex environments (legacy + modern).
• Strong Windows, Linux/Unix, AD knowledge; scripting with PowerShell.

Responsibilities

• Own end-to-end CyberArk PAM platform management (PVWA, CPM, PSM, Vault).
• Onboard and manage privileged accounts across servers, databases, apps & cloud.
• Perform daily operations, incidents, upgrades, and health checks.

Skills

Identity & Access

CyberArk PAM

PAM-Self Hosted

PAM-Cloud

Vault Admin

CPM Lifecycle

PSM/PSM-SSH

PowerShell

CyberArk REST API

Windows/Linux

Active Directory

Job description

CyberArk SME

Our client, a leading global supplier for IT services, requires CyberArk Subject Matter Expert to be based at their client's office in Wokingham, UK.

This is a fully onsite role .

This is a 6+ month temporary contract to start asap

Day rate: Competitive Market rate

Our clinet is seeking a highly skilled and hands on CyberArk Subject Matter Expert (SME) to own, manage, and continuously enhance the CyberArk Privileged Access Management (PAM) platform end to end.

The role demands strong operational expertise, architectural understanding, and the ability to work closely with security, infrastructure, application, and compliance teams.

The CyberArk SME will act as the primary technical authority for the PAM platform, ensuring availability, security posture, integration, and alignment with enterprise risk and compliance requirements. This is a critical onshore role requiring strong stakeholder engagement, leadership, and problem-solving skills.

Key Responsibilities

CyberArk Platform Ownership & Operations

• Manage and support the CyberArk PAM platform end to end (PVWA, CPM, PSM, Vault).
• Onboard, manage, and maintain privileged accounts across servers, databases, applications, and cloud platforms.
• Perform daily operations, incident resolution, upgrades, patching, and health checks.
• Configure password rotation, session monitoring, and access controls.
• Support integration with Active Directory, SIEM, ServiceNow, and other enterprise tools.
• Ensure CyberArk platform meets security, audit, and compliance requirements.
• Act as the primary CyberArk SME, providing guidance and support to stakeholders.
• Own end-to-end management of the CyberArk PAM ecosystem including:
• PVWA
• CPM
• PSM / PSM-SSH
• Vault
• Ensure high availability, stability, scalability, and performance of the CyberArk platform.
• Perform routine maintenance, upgrades, patching, hardening, health checks, and DR testing.
• Monitor platform health and proactively resolve incidents, vulnerabilities, and performance issues.

Privileged Access Lifecycle Management

• Configure, and manage:
  • Privileged account onboarding and offboarding
  • Password vaulting, rotation, reconciliation
  • Session monitoring, recording, and auditing
• Manage privileged access for:
  • Windows, Linux/Unix, Network devices
  • Databases
  • Cloud platforms (Azure)
  • Service, application, and DevOps accounts

Integration & Automation

• Integrate CyberArk with:
  • Active Directory / LDAP
  • SIEM tools (Sentinel)
  • Ticketing tools (ServiceNow)
  • Identity platforms (Azure AD, SSO solutions)
• Develop and maintain automation scripts using:
  • REST APIs
  • PowerShell / Python
  • Support PAM integrations for CI/CD and DevOps pipelines (Secrets Management).

Security, Risk & Compliance

• Act as SME for PAM best practices, Zero Trust principles, and least privilege.
• Support internal and external audits
• Produce compliance reports and evidence from CyberArk.
• Identify risks and recommend continuous security improvements.

Stakeholder & Technical Leadership

• Serve as the primary point of contact for CyberArk-related discussions.
• Lead troubleshooting of complex, high-impact PAM issues.
• Contribute to architecture decisions, roadmaps, and platform strategy.
• Mentor junior team members and support knowledge transfer.

Key Requirements

Essential Skills:

Core CyberArk Expertise

• 7+ years in Identity & Access Management with 5+ years hands-on CyberArk PAM experience.
• Proven expertise across:
  • CyberArk PAM-Self Hosted, Pcloud and/or EPM / PAM-as-a-Service
  • Vault administration and hardening
  • CPM and password lifecycle management
  • PSM / PSM-SSH configuration and troubleshooting
• Strong experience with onboarding complex environments (legacy + modern).
• Solid understanding of Windows, Linux/Unix, Active Directory, and networking basics.
• Experience with PowerShell scripting and CyberArk REST APIs.

Operational & Support Experience

• Strong L2/L3 support experience in production PAM environments.
• Ability to handle incident, problem, and change management effectively.
• Experience working in 24×7 enterprise environments with strict SLAs.

Soft Skills

• Excellent communication and stakeholder management skills.
• Ability to explain complex security topics to non-technical audiences.
• Strong ownership mindset and accountability.
• Comfortable leading discussions, reviews, and decision-making forums

Desirable Skills:

CyberArk certifications:

• CyberArk Defender
• CyberArk Sentry
• CyberArk PAM-CDE / EPM certifications

Experience with:

• CyberArk EPM (Endpoint Privilege Manager)
• CyberArk Secrets Management

Exposure to:

• Zero Trust Architecture
• Cloud-native PAM patterns
• DevSecOps and container security
• Prior experience in regulated industries (Energy Sector).
• Experience leading PAM transformation or platform refresh programs

Due to the volume of applications received, unfortunately we cannot respond to everyone.

If you do not hear back from us within 7 days of sending your application, please assume that you have not been successful on this occasion.

Please do keep an eye on our website https://projectrecruit.com/jobs/ for future roles