CyberArk Engineer (contract)

SysGroup plc; United States; Remote; USD 122,000 - 195,000; Full time

Job summary

SysGroup plc seeks a Cyber Security Engineer specialized in privileged access management with CyberArk as the core platform. This contract role reports to the Cyber Operations Lead and collaborates with SOC engineers. Location: UK-based remote delivery with UK-hours coverage.

Start: ASAP. Responsibilities include owning CyberArk incidents from L2 to L4, troubleshooting vaults and integrations, handling onboarding/offboarding, and performing patching, certificate renewals, and DR checks.

Qualifications

• Identity & Access Management experience.
• ITSM & Service Management knowledge required.
• Incident Management under SLA focus.
• Security tooling and EDR competence required.

Responsibilities

• Own CyberArk incidents and requests L2–L4: triage, diagnose, fix, close within SLA.
• Troubleshoot the full CyberArk stack: vault, CPM rotation failures, PSM session issues, PVWA faults, integration breaks (Entra ID, MFA, SIEM).
• Handle account onboarding/offboarding, safe and policy changes, access reviews from the queue.
• Patch, upgrade, renew certificates and run DR checks (Self-Hosted and Privilege Cloud).
• Maintain runbooks and knowledge records; operate within ITSM change control.

Skills

Identity & Access Management

ITSM & Service Management

Incident Management

Security Tooling & EDR

Tools

CyberArk

PowerShell

Entra ID

EDR

SIEM

Zscaler

Job description

Category: Information Technology Location: The Role SysGroup ishiring a Cyber Security Engineer specialising in privileged accessmanagement, with CyberArk as the core platform. You will reportto the Cyber Operations Lead and work closely with the SOC engineers. UK - Remote Day Rate: negotiable/ open to discussion Start: ASAP

Requirements The Engagement

A contract CyberArk Engineer to support privileged access management across SysGroup's managed client estates. Service delivery focus, with no pre-sales or leadership scope. You own the CyberArk ticket queue from L2 to L4 and are the deep escalation point for the platform. Based anywhere with remote delivery, subject to UK-hours coverage and security screening. In one line: keep CyberArk healthy across multiple client estates and be the person the hard tickets escape to.

Responsibilities

• Own CyberArk incidents and requests L2–L4: triage, diagnose, fix, close within SLA.
• Troubleshoot the full stack — vault, CPM rotation failures, PSM session issues, PVWA faults, integration breaks (Entra ID, MFA, SIEM) — including root-cause analysis and CyberArk vendor escalations.
• Handle account onboarding/offboarding, safe and policy changes, and access reviews from the queue.
• Patch, upgrade, renew certificates and run DR checks (Self-Hosted and Privilege Cloud).
• Keep runbooks and known-error records current; work cleanly within ITSM change control.

Requirements Competency

Identity & Access Management ITSM & Service Management Incident Management Security Tooling & EDR Supporting competencies (cloud, networking, network security, monitoring, scripting, vulnerability management, documentation) at Practitioner.

• 3+ years hands-on CyberArk administration and troubleshooting in production (CPM, PSM, PVWA, vault).
• Proven L3/L4 fault resolution under SLA pressure; ticket-queue and change-control discipline in a managed service.
• PowerShell scripting for diagnosis and repair.
• Desirable: Defender/Sentry certification (experience outweighs paper); Entra ID, EDR, SIEM or Zscaler exposure; MSP background.