Cyberark SME - On Site In Wokingham - 6 Month Initial Contract - Inside IR35

Hamilton Barnes; Wokingham; On-site; GBP 96,000 - 126,000; Full time

Job summary

Hamilton Barnes is seeking a CyberArk SME on-site in Wokingham for a 6-month initial contract Inside IR35. You will own and operate the CyberArk PAM platform end-to-end, covering PVWA, CPM, PSM/PSM-SSH and Vault, including upgrades, patching, and health checks.

The role involves privileged access lifecycle management, integration with AD/LDAP and SIEM, automation via PowerShell and Python, and contributing to platform roadmaps while mentoring junior engineers.

Qualifications

• 7+ years in IAM with CyberArk experience covering PAM Self-Hosted, PCloud, Vault administration, and PSM configurations.
• Experience managing privileged access across Windows, Linux, databases, Azure, and DevOps/service accounts.
• Strong scripting capabilities with REST APIs; automation using PowerShell/Python.

Responsibilities

• Own and manage the CyberArk PAM platform end-to-end (PVWA, CPM, PSM, Vault).
• Handle daily operations, incidents, upgrades, patching and health checks.
• Manage privileged access lifecycle: onboarding, offboarding, password vaulting, rotation, and auditing.
• Integrate CyberArk with AD/LDAP, SIEM, ServiceNow and Azure AD; develop automation scripts.
• Lead architecture discussions, mentoring, and contribute to roadmaps in a regulated environment.

Skills

CyberArk PAM

Privileged lifecycle

Integration & automation

Support operations

Stakeholder leadership

Tools

PowerShell

Python

Job description

CyberArk SME - On Site in Wokingham - 6 Month Initial Contract - Inside IR35

Role Overview

A highly skilled and hands-on CyberArk Subject Matter Expert to own, manage, and continuously enhance a CyberArk PAM platform end-to-end. The position acts as the primary technical authority for the PAM platform, combining strong operational expertise with architectural understanding across security, infrastructure, application, and compliance functions. The role carries significant stakeholder engagement, leadership, and platform strategy responsibilities within a regulated enterprise environment.

Key Responsibilities

• Own and manage the CyberArk PAM platform end-to-end, including PVWA, CPM, PSM/PSM-SSH, and Vault, performing daily operations, incident resolution, upgrades, patching, and health checks.
• Manage the full privileged access life cycle including account onboarding and offboarding, password vaulting, rotation, reconciliation, and session monitoring and auditing across Windows, Linux, databases, Azure, and DevOps environments.
• Integrate CyberArk with enterprise platforms including Active Directory/LDAP, Microsoft Sentinel, ServiceNow, and Azure AD, developing and maintaining automation scripts via REST APIs, PowerShell, and Python.
• Act as SME for PAM best practices, Zero Trust principles, and least privilege, supporting internal and external audits and producing compliance reports and evidence.
• Lead troubleshooting of complex, high-impact PAM issues, contribute to architecture decisions and platform roadmaps, and mentor junior team members.

Top 5 Skills

• CyberArk PAM expertise - 7+ years in IAM with 5+ years hands-on CyberArk experience across PAM Self-Hosted, PCloud, EPM, Vault administration, CPM password life cycle management, and PSM/PSM-SSH configuration and troubleshooting; CyberArk Defender or Sentry certification strongly preferred.
• Privileged access life cycle management - Proven experience onboarding and managing complex privileged environments across Legacy and modern platforms including Windows, Linux/Unix, network devices, databases, Azure, and DevOps/service accounts.
• Integration & automation - Strong experience integrating CyberArk with SIEM, ITSM, and identity platforms, with hands-on PowerShell and Python Scripting capability using CyberArk REST APIs and CI/CD Secrets Management.
• Operational & production support - Strong L2/L3 support experience in 24x7 enterprise PAM environments, with proven ability to manage incident, problem, and change management effectively within strict SLA frameworks.
• Stakeholder engagement & technical leadership - Excellent communication skills with the ability to explain complex security topics to non-technical audiences, lead architecture discussions, and drive platform strategy within a regulated environment; prior experience in the energy sector is a strong advantage.

Contract Details

• Rate: £600 per day Inside IR35
• Location: On Site in Wokingham
• Duration: Initial 6 Month Contract