Security Engineer - PAM/ CyberArk

Harrington Starr; Greater London; On-site; GBP 85,000 - 110,000; Full time

Job summary

Harrington Starr in London is seeking a Security Engineer to drive CyberArk PAM capabilities across our global financial services environment. This role focuses on privileged account protection, secrets management, and access control.

You will administer CyberArk components, onboard accounts, rotate credentials, and enforce least-privilege governance while supporting Windows, Linux, and cloud platforms. The ideal candidate brings hands-on PAM experience, strong collaboration skills, and a

Qualifications

• 5+ years in Information Security preferred
• Hands-on CyberArk PAM experience
• Experience with Windows/Linux/cloud environments
• Experience with identity protection and governance
• Ability to collaborate with multiple teams

Responsibilities

• Administer CyberArk PAM capabilities and onboarding.
• Manage privileged accounts lifecycle and access reviews.
• Troubleshoot PAM issues and support upgrades.
• Support identity security across Windows, Linux, cloud, and databases.
• Develop security metrics, reports, and audit evidence.
• Collaborate with IT, security, and auditors on incident handling.
• Implement secrets and key management solutions.
• Improve threat detection and security operations.
• Automate tasks and build analytical tools.
• Understand CIS and NIST frameworks.

Skills

CyberArk PAM

Privileged Access Management

Identity security

Threat detection

Incident response

Vulnerability management

Automation

Collaboration

Tools

HashiCorp Vault

CyberArk components

Venafi

DigiCert

Job description

We are looking for a Security Engineer with strong hands-on experience in CyberArk and Privileged Access Management (PAM) to strengthen our Cyber Security team.

This role offers the opportunity to engineer, administer, and continuously improve identity security capabilities, with a primary focus on CyberArk, privileged account protection, secrets management, and access control across a global financial services environment.

• Administer, configure, and enhance CyberArk PAM capabilities, including account onboarding, Safes, platforms, policies, credential rotation, session management, and access workflows.
• Manage the privileged account lifecycle, least-privilege controls, break-glass access, access reviews, and privileged access governance.
• Troubleshoot PAM issues, monitor security controls, and support platform upgrades, integrations, and continuous improvements.
• Support identity security across Windows, Linux, cloud platforms, databases, directory services, and service accounts.
• Contribute to secrets management, key management, PKI, and certificate management solutions.
• Engineer and optimise security tools to improve threat detection, incident response, and security operations.
• Automate operational tasks, develop analytical tools, and produce security metrics, control reports, and audit evidence.
• Collaborate with infrastructure, IT, and security teams on incident handling, system hardening, vulnerability management, and security standards.
• Hands-on experience with CyberArk PAM or an equivalent Privileged Access Management solution.
• Practical knowledge of CyberArk components and capabilities, including credential vaulting, password rotation, session monitoring, account onboarding, and access policies.
• Understanding of Microsoft Entra ID, identity protection, privileged access governance, and access control technologies.
• Experience with secrets and key management tools such as HashiCorp Vault, Conjur, or equivalent.
• Knowledge of PKI and certificate management tools such as Venafi, DigiCert, or equivalent.
• Experience securing Windows, Linux, cloud environments, databases, directory services, and service accounts.
• Understanding of security frameworks and standards such as CIS and NIST.
• Knowledge of incident response, vulnerability management, security control assurance, and audit requirements.
• Strong troubleshooting, communication, documentation, and stakeholder management skills.
• A proactive security professional with a strong interest in identity security and privileged access protection.
• Someone who takes ownership, demonstrates technical curiosity, and thrives in a fast-paced environment.
• A collaborative team player who can work effectively with technical teams, auditors, control owners, and business stakeholders.
• A candidate who is committed to continuous improvement, operational resilience, and security best practices.

Experience: 5+ years in Information Security preferred; candidates with less experience will also be considered.