CyberArk SME Engineer

MARGO; Greater London; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Front Office exposure

Challenging projects

HFT vs non-HFT focus

Career development

Small team culture

Job summary

MARGO, a tech-native consultancy, seeks a CyberArk SME Engineer to drive PAM modernization for a major London bank. You will own vault architecture, automate onboarding, and enhance governance with AD/IDM integrations.

You'll collaborate with PMs, BAs, and security architects to deliver scalable, secure infrastructure and prepare for cloud migration. You will work in a demanding Front Office/Trading IT environment, leveraging Python, PowerShell, REST APIs, and PACLI to streamline metadata

Qualifications

• 8–10+ years of dedicated, hands-on CyberArk/PAM engineering and implementation experience.
• End-to-End SME expertise in full-lifecycle CyberArk deployments and platform enhancements.
• Heavy automation & scripting using PowerShell or Python with CyberArk REST APIs or SDKs.
• Strong experience with AD/IDM integrations and large-scale metadata synchronization.
• Reliability with long-term project delivery in complex financial services environments.
• Industry background is secondary to practical CyberArk implementation depth.

Responsibilities

• Act as SME for CyberArk implementation, vault structure, and platform engineering.
• Design and execute script-driven onboarding automation for servers, accounts, and apps using PowerShell, Python, REST APIs, or PACLI.
• Lead automated data cleansing to fix naming conventions, permissions, and metadata.
• Integrate CyberArk with Active Directory and IDM frameworks.
• Collaborate with PMs, BAs, and security architects to set governance baselines and onboarding workflows.
• Prepare environment for future CyberArk Cloud migration.

Skills

Automation scripting

Active Directory integration

PAM engineering

Tools

CyberArk

REST APIs

SDKs

PowerShell

Python

Job description

Join MARGO in the UK (London) – Perm & Contracting Opportunities

MARGO is a tech-native consultancy delivering high value-added IT expertise to the financial services industry.

We specialise in complex software engineering environments where performance, robustness and scalability are critical: real-time systems, low-latency architectures, distributed computing and high-throughput data processing.

Joining MARGO means working in demanding Front Office and Trading IT environments, while benefiting from a human-sized structure, close follow-up and tailor-made training paths.

About the Business & Project Focus

A premier Tier 1 Investment Bank based in London, is currently undergoing a strategic, multi-year CyberArk Privileged Access Management (PAM) modernization initiative. The initiative spans three key phases:

• Year 1: Deep Data Cleansing, Standardization, Naming Conventions, Permission Models, and Metadata Optimization.
• Year 2: Enterprise Migration to CyberArk Cloud.
• Year 3: Advanced Modernization and High-Level Automation.

Currently halfway through Year 1, the bank requires a hands‑on CyberArk SME Engineer to act as the technical authority. Working alongside a dedicated PM, BA, and engineering team, you will drive ongoing metadata normalization, programmatic onboarding automation, and core architecture enhancements to prepare the enterprise for cloud migration.

Key Responsibilities

• Act as the primary Subject Matter Expert (SME) for CyberArk implementation, vault structure, and platform engineering across the organization.
• Design and execute script-driven onboarding automation for target servers, accounts, and applications using Python, PowerShell, REST APIs, or PACLI.
• Lead automated data cleansing efforts to address inconsistent naming conventions, permission frameworks, and missing metadata across target systems.
• Integrate CyberArk solutions seamlessly with Active Directory (AD), Identity Management (IDM) frameworks, and core enterprise infrastructure.
• Collaborate with project managers, business analysts, and security architects to establish governance baselines and streamlined onboarding workflows.
• Prepare the existing environment structurally and operationalize configurations for future CyberArk Cloud migration.

Key Qualifications & Experience Required

• Track Record: 8–10+ years of dedicated, hands‑on CyberArk/PAM engineering and implementation experience.
• End-to-End SME Expertise: Demonstrable track record leading full-lifecycle CyberArk deployments, architectural enhancements, and component builds (Vault, CPM, PSM, EPM, CP/CCP).
• Heavy Automation & Scripting: Strong, proven expertise writing custom automation scripts in PowerShell or Python utilizing CyberArk REST APIs or SDKs for bulk onboarding and metadata updates.
• Identity Integrations: Deep experience handling large-scale metadata synchronization and integrations with Active Directory (AD) and IDM platforms.
• Reliability: Proven history of long-term project delivery within complex corporate or financial services environments.
• Note: Industry background and certifications are secondary to demonstrable technical depth in practical CyberArk implementation and API scripting.

Why Join MARGO

• Access to multi-asset Front Office, Trading and Electronic Trading environments
• Highly technical and challenging engineering assignments
• Clear positioning between HFT and non-HFT trading systems
• Strong emphasis on skill development and long-term career progression
• Human-sized consultancy with close support and high-quality missions

Please note - We do not offer visa sponsorship for this position.