Remote CyberArk Engineer — L3/L4 Incident Specialist

SysGroup plc; United States; Remote; USD 122,000 - 195,000; Full time

Job summary

SysGroup plc seeks a Cyber Security Engineer specialized in privileged access management with CyberArk as the core platform. This contract role reports to the Cyber Operations Lead and collaborates with SOC engineers. Location: UK-based remote delivery with UK-hours coverage.

Start: ASAP. Responsibilities include owning CyberArk incidents from L2 to L4, troubleshooting vaults and integrations, handling onboarding/offboarding, and performing patching, certificate renewals, and DR checks.

Qualifications

• Identity & Access Management experience.
• ITSM & Service Management knowledge required.
• Incident Management under SLA focus.
• Security tooling and EDR competence required.

Responsibilities

• Own CyberArk incidents and requests L2–L4: triage, diagnose, fix, close within SLA.
• Troubleshoot the full CyberArk stack: vault, CPM rotation failures, PSM session issues, PVWA faults, integration breaks (Entra ID, MFA, SIEM).
• Handle account onboarding/offboarding, safe and policy changes, access reviews from the queue.
• Patch, upgrade, renew certificates and run DR checks (Self-Hosted and Privilege Cloud).
• Maintain runbooks and knowledge records; operate within ITSM change control.

Skills

Identity & Access Management

ITSM & Service Management

Incident Management

Security Tooling & EDR

Tools

CyberArk

PowerShell

Entra ID

EDR

SIEM

Zscaler

Job description

SysGroup plc seeks a Cyber Security Engineer specialized in privileged access management with CyberArk as the core platform. This contract role reports to the Cyber Operations Lead and collaborates with SOC engineers. Location: UK-based remote delivery with UK-hours coverage.

Start: ASAP. Responsibilities include owning CyberArk incidents from L2 to L4, troubleshooting vaults and integrations, handling onboarding/offboarding, and performing patching, certificate renewals, and DR checks.