CyberArk Engineer

CyberArk Implementation Engineer | Contract | London Overview<br />I'm working on a fantastic contract opportunity for a leading investment bank, looking for a senior CyberArk Implementation Engineer to lead a major Privileged Access Management transformation across their enterprise infrastructure.

Role and Responsibilities Leading CyberArk SaaS migration and metadata clean-up as SME<br />Administering Vault, users, groups, policies and security settings<br />Automating onboarding, rotation and decommissioning of privileged credentials<br />Planning and delivering upgrades, health checks and post-upgrade assurance<br />Defining Safes, RBAC and master policies aligned to NIST and Zero Trust<br />Building custom CPM/PSM connectors and automation scripts<br />Providing SME-level support for incidents and troubleshooting<br />Maintaining HLD, LLD and knowledge base documentation<br />Requirements &amp; Skills Senior CyberArk engineer with genuine hands-on implementation experience (not just BAU support)<br />Proven delivery of upgrades, migrations, onboarding, policy design, connector development and automation<br />CyberArk:

Vault (On-Prem/SaaS), PVWA, CPM, PSM, PSMP, PTA, CCP/AAM/AIM, Conjur/Secret Manager<br />Infra &amp; Cloud: Active Directory, Windows Server, Linux (RHEL), RDP, SSH, certificates, Azure/AWS/GCP, Entra ID, JIT/JEA/Zero Standing Privilege<br />Automation:

PowerShell, REST API, Python, Bash<br />Experience in regulated enterprise environments — investment banking/financial services ideal<br />Certifications (advantageous):

CyberArk Defender, Sentry, Guardian, CDE, Security+, CISSP<br />Strong oral and written communication, and ability to cope well under pressure<br />Willingness for cross-region working and occasional out-of-hours/weekend support<br />Details<br />Location:

London (Hybrid – 3 days onsite)<br />Contract Length: 6-8 months<br />Rate: Up to £725.00/day (Umbrella), Inside IR35 Drop me a message or send your CV if you'd like to hear more