Security Engineer

Sanderson; Greater London; Hybrid; GBP 72,000 - 88,000; Full time

Benefits offered by this job

Hybrid work arrangement

Job summary

Sanderson is seeking an experienced CyberArk PAM Engineer in London to join its security engineering team. The role focuses on day-to-day engineering, support and continuous improvement of the CyberArk PAM environment, working with infrastructure, identity, applications and security teams.

Key responsibilities include onboarding privileged accounts, credential management, rotation, session control and integration with AD, Entra ID and cloud platforms.

Qualifications

• Hands-on CyberArk PAM engineering experience in a large enterprise environment.
• Experience with CyberArk PVWA, CPM and PSM.
• Onboarding privileged accounts, credential management and Safe configuration.

Responsibilities

• Engineer, configure and maintain CyberArk PAM platform.
• Onboard privileged, service and application accounts with Safe management and rotation.
• Manage privileged sessions, access controls, reconciliation and authentication processes.
• Troubleshoot CyberArk rotations, connectivity and integration issues.
• Support platform upgrades, patching, resilience and DR.
• Integrate PAM with Active Directory, Microsoft Entra ID, cloud platforms and apps.
• Develop automation using PowerShell, Python and REST APIs.
• Support continuous improvements to privileged access security and processes.

Skills

CyberArk PAM

PVWA

CPM

PSM

Onboarding privileged accounts

Tools

PowerShell

Python

REST APIs

Job description

Salary: Up to £80,000 + Benefits

Position: Permanent

Level: AVP

I'm currently working with a leading global investment bank that is looking to appoint an experienced CyberArk PAM Engineer to join its growing Cyber Security function.

The organisation is undergoing significant technology transformation, with continued investment in its cybersecurity capabilities, infrastructure and security engineering.

This is a fantastic opportunity for a technically strong, hands‑on engineer who enjoys working across a broad technology environment and wants to play a key role in developing, maintaining and enhancing Privileged Access Management (PAM) capabilities.

The Role

You’ll be responsible for the day‑to‑day engineering, support and continuous improvement of the organisation’s CyberArk PAM environment, working closely with infrastructure, identity, application and wider security teams.

Key responsibilities include:

• Engineering, configuring and maintaining the CyberArk PAM platform.
• Onboarding privileged, service and application accounts, including Safe management and credential rotation.
• Managing privileged sessions, access controls, reconciliation and authentication processes.
• Troubleshooting complex CyberArk issues, including failed rotations, connectivity and integration problems.
• Supporting platform upgrades, patching, resilience and disaster recovery.
• Integrating PAM solutions with Active Directory, Microsoft Entra ID, cloud platforms and enterprise applications.
• Developing automation using PowerShell, Python and REST APIs.
• Supporting continuous improvements to privileged access security and operational processes.

What We're Looking For

• Strong hands‑on CyberArk PAM engineering experience, ideally within a large enterprise environment.
• Experience with CyberArk components such as PVWA, CPM and PSM.
• Proven experience with privileged account onboarding, credential management, password rotation and Safe configuration.
• Strong understanding of Active Directory, Windows Server and wider infrastructure technologies.
• Experience troubleshooting and supporting complex PAM environments.
• Exposure to scripting and automation using PowerShell, Python or APIs.
• Knowledge of Azure and hybrid‑cloud environments.
• Previous experience within financial services or investment banking would be highly advantageous.

We're particularly interested in engineers with a broad technical background who are comfortable taking ownership of complex challenges, rather than those focused purely on governance or operational monitoring.

Why Consider This Opportunity?

• Join a globally recognised financial services organisation.
• Be part of a growing cybersecurity function undergoing significant investment and transformation.
• Gain exposure to complex, enterprise‑scale security infrastructure.
• Work across a broad range of technologies with genuine hands‑on engineering responsibilities.
• Opportunity to contribute to the ongoing development and maturity of PAM capabilities.
• Hybrid working arrangements with approximately two days per week in the London office.