Security Engineer - PAM/ CyberArk

We are looking for a Security Engineer with strong hands-on experience in CyberArk and Privileged Access Management (PAM) to strengthen our Cyber Security team.

This role offers the opportunity to engineer, administer, and continuously improve identity security capabilities, with a primary focus on CyberArk, privileged account protection, secrets management, and access control across a global financial services environment.

• Administer, configure, and enhance CyberArk PAM capabilities, including account onboarding, Safes, platforms, policies, credential rotation, session management, and access workflows.
• Manage the privileged account lifecycle, least-privilege controls, break-glass access, access reviews, and privileged access governance.
• Troubleshoot PAM issues, monitor security controls, and support platform upgrades, integrations, and continuous improvements.
• Support identity security across Windows, Linux, cloud platforms, databases, directory services, and service accounts.
• Contribute to secrets management, key management, PKI, and certificate management solutions.
• Engineer and optimise security tools to improve threat detection, incident response, and security operations.
• Automate operational tasks, develop analytical tools, and produce security metrics, control reports, and audit evidence.
• Collaborate with infrastructure, IT, and security teams on incident handling, system hardening, vulnerability management, and security standards.
• Hands-on experience with CyberArk PAM or an equivalent Privileged Access Management solution.
• Practical knowledge of CyberArk components and capabilities, including credential vaulting, password rotation, session monitoring, account onboarding, and access policies.
• Understanding of Microsoft Entra ID, identity protection, privileged access governance, and access control technologies.
• Experience with secrets and key management tools such as HashiCorp Vault, Conjur, or equivalent.
• Knowledge of PKI and certificate management tools such as Venafi, DigiCert, or equivalent.
• Experience securing Windows, Linux, cloud environments, databases, directory services, and service accounts.
• Understanding of security frameworks and standards such as CIS and NIST.
• Knowledge of incident response, vulnerability management, security control assurance, and audit requirements.
• Strong troubleshooting, communication, documentation, and stakeholder management skills.
• A proactive security professional with a strong interest in identity security and privileged access protection.
• Someone who takes ownership, demonstrates technical curiosity, and thrives in a fast-paced environment.
• A collaborative team player who can work effectively with technical teams, auditors, control owners, and business stakeholders.
• A candidate who is committed to continuous improvement, operational resilience, and security best practices.

Experience: 5+ years in Information Security preferred; candidates with less experience will also be considered.

#J-18808-Ljbffr