CyberArk Engineer - Privileged Access Specialist (Remote)

Zohorecruit; United States; Remote; USD 96,432,000 - 165,312,000; Full time

Job summary

SysGroup PLC is recruiting a Cyber Security Engineer specializing in privileged access management with CyberArk at the core. You will report to the Cyber Operations Lead and collaborate with the SOC engineers to keep the CyberArk platform healthy across client estates.

The engagement is contract-based with remote delivery, requiring UK-hours coverage and security screening. You own CyberArk incidents from L2 to L4 and drive issue resolution while maintaining SLA performance.

Qualifications

• 3+ years hands-on CyberArk administration and troubleshooting in production (CPM, PSM, PVWA, vault).
• Proven L3/L4 fault resolution under SLA pressure; ticket-queue and change-control discipline in a managed service.
• PowerShell scripting for diagnosis and repair.
• Desirable: Defender/Sentry certification; Entra ID, EDR, SIEM or MSP background.

Responsibilities

• Own CyberArk incidents and requests L2–L4: triage, diagnose, fix, close within SLA.
• Troubleshoot the full stack — vault, CPM rotation failures, PSM session issues, PVWA faults, integration breaks (Entra ID, MFA, SIEM) — including root-cause analysis and CyberArk vendor escalations.
• Handle account onboarding/offboarding, safe and policy changes, and access reviews from the queue.
• Patch, upgrade, renew certificates and run DR checks (Self-Hosted and Privilege Cloud).
• Keep runbooks and known-error records current; work cleanly within ITSM change control.

Skills

Identity & Access Management

ITSM & Service Management

Security Tooling

Scripting

Documentation

Tools

CyberArk

PowerShell

Job description

SysGroup PLC is recruiting a Cyber Security Engineer specializing in privileged access management with CyberArk at the core. You will report to the Cyber Operations Lead and collaborate with the SOC engineers to keep the CyberArk platform healthy across client estates.

The engagement is contract-based with remote delivery, requiring UK-hours coverage and security screening. You own CyberArk incidents from L2 to L4 and drive issue resolution while maintaining SLA performance.