Hybrid CyberArk PAM Engineer – IAM Architect

HCC Service Co. UK Branch; England; Hybrid; GBP 90,000 - 130,000; Full time

Job summary

Tokio Marine HCC seeks a Senior Identity & PAM Engineer to lead CyberArk PAM architecture, deployment, and operation across Entra ID, AD and Okta. You will implement JIT access, manage vaults and credentials, and drive IAM modernization in a hybrid environment.

The role requires deep hands-on CyberArk expertise, strong scripting abilities, and collaboration with IAM stakeholders to ensure secure access across cloud and on‑prem environments.

Qualifications

• Senior Identity & PAM Engineer with enterprise IAM expertise.

Responsibilities

• Lead CyberArk PAM design, deployment, and operations across Entra ID, AD, and Okta
• Manage safes, accounts, credential rotation, and access controls
• Implement Just‑In‑Time privileged access integrated with Entra PIM
• Integrate CyberArk with Entra ID, AD, and Okta for authentication workflows
• Deploy CyberArk EPM for least privilege enforcement
• Integrate Secrets Manager/Conjur for DevOps and Kubernetes
• Develop automation using REST APIs and PowerShell
• Design disaster recovery and vault backup strategies
• Align with Zero Trust security principles
• Stay updated on CyberArk roadmap and threats

Skills

CyberArk PAS

Privileged Access

Entra ID

Active Directory

Okta

PowerShell

REST APIs

IAM concepts

Zero Trust

Incident response

Tools

CyberArk Vault

EPM

PTA

Secrets Manager/Conjur

AD tooling

Job description

Tokio Marine HCC seeks a Senior Identity & PAM Engineer to lead CyberArk PAM architecture, deployment, and operation across Entra ID, AD and Okta. You will implement JIT access, manage vaults and credentials, and drive IAM modernization in a hybrid environment.

The role requires deep hands-on CyberArk expertise, strong scripting abilities, and collaboration with IAM stakeholders to ensure secure access across cloud and on‑prem environments.