Cyberark SME - Wokingham - 6 Months - Inside IR35

Hamilton Barnes; Wokingham; On-site; GBP 96,000 - 126,000; Full time

Job summary

Hamilton Barnes seeks a CyberArk SME for a hands-on, end-to-end PAM platform owner role in Wokingham. Lead architecture decisions, drive platform strategy, and mentor juniors across security, infrastructure and compliance teams.

You will manage PVWA/CPM/PSM, implement best practices, and coordinate audits with multi-team stakeholders while ensuring uptime and security in a fast-paced environment.

Qualifications

• 7+ years in IAM with 5+ years hands-on CyberArk (Self-Hosted, PCloud and/or EPM).
• Experience onboarding Legacy and modern environments with Windows, Linux/Unix, AD and networking.
• PowerShell and REST API experience, Python and Secrets Management for CI/CD.
• 24x7 enterprise PAM support with strict SLAs.
• Strong communicator able to explain security topics to non-technical audiences.

Responsibilities

• Own and manage the CyberArk PAM platform end-to-end (PVWA, CPM, PSM/PSM-SSH, Vault).
• Handle daily operations, incidents, upgrades, patching, hardening, health checks, DR testing.
• Manage privileged access lifecycle across Windows, Linux/Unix, networks, databases, Azure, DevOps.
• Integrate CyberArk with AD/LDAP, Sentinel, ServiceNow, and Azure AD; build REST API automation.
• Lead PAM best practices, audits, and compliance evidence; mentor junior team members.

Skills

CyberArk PAM expertise

Complex onboarding

Scripting integration

Production support

Stakeholder leadership

Job description

CyberArk SME - Wokingham - 6 months - Inside IR35

Role Overview

A hands-on CyberArk Subject Matter Expert to own, manage, and continuously enhance a CyberArk PAM platform end-to-end. The role is the primary technical authority for the platform, combining operational expertise with architectural understanding across security, infrastructure, application, and compliance teams. It carries significant stakeholder engagement, leadership, and platform strategy responsibility.

Key Responsibilities

• Own and manage the CyberArk PAM platform end-to-end (PVWA, CPM, PSM/PSM-SSH, Vault), covering daily operations, incident resolution, upgrades, patching, hardening, health checks, and DR testing.
• Manage the full privileged access lifecycle, including onboarding and offboarding, password vaulting, rotation, reconciliation, and session monitoring across Windows, Linux/Unix, network devices, databases, Azure, and DevOps accounts.
• Integrate CyberArk with Active Directory/LDAP, Sentinel, ServiceNow, and Azure AD, and build automation using REST APIs, PowerShell, and Python.
• Act as SME for PAM best practices, Zero Trust, and least privilege, supporting audits and producing compliance evidence.
• Lead troubleshooting of complex PAM issues, contribute to architecture and roadmap decisions, and mentor junior team members.

Top 5 Skills

• CyberArk PAM expertise: 7+ years in IAM with 5+ years hands-on CyberArk (Self-Hosted, PCloud and/or EPM), including Vault hardening, CPM, and PSM/PSM-SSH.
• Complex onboarding: Experience onboarding Legacy and modern environments, with a solid grasp of Windows, Linux/Unix, AD, and networking.
• Scripting and integration: PowerShell and CyberArk REST API experience, ideally with Python and Secrets Management for CI/CD.
• Production support: Strong L2/L3 experience in 24x7 enterprise PAM environments with strict SLAs.
• Stakeholder leadership: Strong communicator who can explain complex security topics to non-technical audiences. CyberArk Defender or Sentry certification and energy sector experience are desirable.

Contract Details:

• Rate: £600 per day Inside IR35
• Location: On Site in Wokingham
• Duration: 6 Month Initial Contract