Senior Cyber Security Engineer (CyberArk & PAM)

SysGroup PLC; City of Edinburgh; On-site; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Private Healthcare

Life insurance

Pension

Job summary

SysGroup PLC is seeking a Senior Cyber Security Engineer in Edinburgh to own CyberArk design, deployment and health across managed clients. You will lead PAM enhancements, integrate with Entra ID and MFA, and set access standards for audits. Hands-on with Zscaler and other security tooling is required.

The role reports to the Cyber Operations Lead and involves scripting in PowerShell or Python, and contributions to automation libraries. MSP/MSSP exposure is valued.

Qualifications

• 5+ years in security engineering and hands-on CyberArk design/administration
• Experience deploying or operating Zscaler (ZIA/ZPA) and multiple security tooling
• Strong scripting for automation and integration (PowerShell or Python)
• MSP/MSSP or multi-client environment experience preferred; audits exposure is a bonus

Responsibilities

• Own CyberArk design, deployment and operation across managed clients: vaulting, session management, secrets management and privileged threat analytics.
• Design PAM onboarding programmes for new clients: discovery, scoping, policy design and rollout.
• Integrate PAM with the wider identity stack: Entra ID, conditional access, MFA and just-in-time access patterns.
• Set privileged access standards and evidence them for client audits (ISO 27001, Cyber Essentials Plus).
• Deploy, configure and maintain the security tooling estate: EDR, SIEM integrations, vulnerability scanning and email security.
• Support Zscaler deployment and policy work alongside zero trust leads; own tooling health, automation and runbooks.
• Act as senior escalation for identity and tooling incidents; contribute to service reviews and documentation.
• Adopt AI-assisted workflows for diagnostics, configuration review and documentation.

Skills

PowerShell

Python

Security engineering

MSP experience

Tools

CyberArk

Zscaler (ZIA/ZPA)

EDR

SIEM

Job description

Senior Cyber Security Engineer (CyberArk & PAM)

Edinburgh, United Kingdom | Posted on 16/07/2026

SysGroup ishiring a Senior Cyber Security Engineer specialising in privileged accessmanagement, with CyberArk as the core platform. This is the senior tooling andidentity specialist role in the Cyber Security team under our 2026 operatingmodel: you own the design, deployment and health of the security tooling estateacross our managed clients, with PAM as your deepest expertise.

BeyondCyberArk, the role carries breadth across the modern security stack: hands-onexperience with Zscaler (ZIA/ZPA) and working capability across EDR, SIEM, vulnerability management and the wider cyber product set we operate forclients.

You will reportto the Cyber Operations Lead and work closely with the SOC engineers, thePre-sales Security Consultant and the Platform & Infrastructure teams.

CyberArk & privileged access management

• Own CyberArk design, deployment and operation across managed clients: vaulting, session management, secretsmanagement and privileged threat analytics.
• Design PAM onboarding programmes for new clients: discovery, scoping, policy design and rollout.
• Integrate PAM with the wideridentity stack: Entra ID, conditional access, MFA and just-in-time accesspatterns.
• Set privileged access standards and evidence them for client audits (ISO 27001, Cyber Essentials Plus).

Security tooling & engineering

• Deploy, configure and maintain the security tooling estate: EDR, SIEM integrations, vulnerability scanning and email security.
• Support Zscaler (ZIA/ZPA)deployment and policy work alongside the zero trust leads.
• Own tooling health: versioncurrency, coverage gaps, tuning quality and integration reliability.
• Automate deployment and operational tasks with scripts and APIs; contribute to the shared automation library.
• Act as senior escalation foridentity and tooling incidents; support major incident response.
• Document designs, runbooks and standards to a level the wider team can operate from.
• Contribute tooling and PAMexpertise to service reviews and solution scoping when needed.
• Adopt AI-assisted workflows for diagnostics, configuration review and documentation.

Experience

• 5+ years in security engineering with 2+ years of hands‑on CyberArk design and administration (PAM Self‑Hosted or Privilege Cloud).
• Experience deploying or operating Zscaler (ZIA/ZPA) and at least two of: EDR platforms, SIEM, vulnerability management, email security.
• Strong scripting capability (PowerShell or Python) applied to security tooling automation and integration.
• MSP/MSSP or multi‑client environment experience preferred; client audit exposure an advantage.

Certifications

• Essential (or equivalent hands‑on experience): CyberArk Defender certification; CyberArk Sentry strongly preferred.
• Desirable: CyberArk Guardian, Zscaler professional‑level certification (ZIA/ZPA), Microsoft SC‑300, SC‑200, AZ‑500, or EDR vendor certifications.

Why Join Us?

Joining Sysgroup means becoming part of adynamic and innovative team that is dedicated to excellence. We offer a supportive, and collaborative work environment, where your ideas and contributions are valued. Here are some of the benefits of working with us:

Competitive Compensation

• We offer a competitive salary package, including performance-based incentives, to reward your hard work and achievements.
• Private Healthcare
• Life insurance
• Pension

We believe in investing in our employees' professional development. You will have your own individual development learning paths with access to various training material and ongoing career advancement opportunities.