CyberArk Engineer

CyberArk Implementation Engineer | Contract | LondonOverviewI'm working on a fantastic contract opportunity for a leading investment bank, looking for a senior CyberArk Implementation Engineer to lead a major Privileged Access Management transformation across their enterprise infrastructure.Role and Responsibilities\n

\n
• Leading CyberArk SaaS migration and metadata clean-up as SME
\n
• Administering Vault, users, groups, policies and security settings
\n
• Automating onboarding, rotation and decommissioning of privileged credentials
\n
• Planning and delivering upgrades, health checks and post-upgrade assurance
\n
• Defining Safes, RBAC and master policies aligned to NIST and Zero Trust
\n
• Building custom CPM/PSM connectors and automation scripts
\n
• Providing SME-level support for incidents and troubleshooting
\n
• Maintaining HLD, LLD and knowledge base documentation
\n

Requirements & Skills\n

\n
• Senior CyberArk engineer with genuine hands-on implementation experience (not just BAU support)
\n
• Proven delivery of upgrades, migrations, onboarding, policy design, connector development and automation
\n
• CyberArk: Vault (On-Prem/SaaS), PVWA, CPM, PSM, PSMP, PTA, CCP/AAM/AIM, Conjur/Secret Manager
\n
• Infra & Cloud: Active Directory, Windows Server, Linux (RHEL), RDP, SSH, certificates, Azure/AWS/GCP, Entra ID, JIT/JEA/Zero Standing Privilege
\n
• Automation: PowerShell, REST API, Python, Bash
\n
• Experience in regulated enterprise environments — investment banking/financial services ideal
\n
• Certifications (advantageous): CyberArk Defender, Sentry, Guardian, CDE, Security+, CISSP
\n
• Strong oral and written communication, and ability to cope well under pressure
\n
• Willingness for cross-region working and occasional out-of-hours/weekend support
\n

DetailsLocation: London (Hybrid – 3 days onsite)Contract Length: 6-8 monthsRate: Up to £725.00/day (Umbrella), Inside IR35Drop me a message or send your CV if you'd like to hear more