PAM Engineer - CyberArk

Job Description

Cyber Security Engineer – PAM, CyberArk, EDR, SIEM – Surrey based hybrid - £75,000 - £90,000 + 20% bonus

We are working with a top financial services client to find a Cyber Security Engineer specialising in privileged access management, with CyberArk as the core platform. As a Privileged Access Management (PAM) specialist, you will act as the subject-matter expert, providing architectural leadership across PAM platforms, integrations, and operating models.

Working closely with security, infrastructure, cloud, and risk stakeholders, you will ensure PAM controls are consistently embedded across on-premises, cloud, and SaaS environments. The role combines design with hands-on project work , balancing security, usability, and operational efficiency. You will also provide oversight for PAM implementations and ensure alignment with Zero Trust and enterprise identity strategies.

This role requires 2-3 days onsite in Surrey and you will be able to work from home the rest of the week. This is an essential requirement, for team collaboration and on-site work.

Key Skills

• Proven skills in CyberArk design and administration
• Strong scripting capability, using PowerShell or Python, applied to security tooling automation and integration.
• CyberArk Sentry – ideally but proven experience would work
• Any of the following are nice to have : CyberArk Guardian, Microsoft SC-300, SC-200, AZ-500, or EDR vendor certifications
  
  

Main Duties and responsibilities

• Own CyberArk design, deployment and operation across the company platforms: vaulting, session management, secrets management and privileged threat analytics.
• Design PAM onboarding programmes: discovery, scoping, policy design and rollout.
• Integrate PAM with the wider identity stack: Entra ID, conditional access, MFA and just-in-time access patterns.