Want to know if this job is worth applying to?
Greater London, England, United Kingdom
Hybrid
Not Available
A premier Tier 1 Investment Bank based in London, is currently undergoing a strategic, multi-year CyberArk Privileged Access Management (PAM) modernization initiative. The initiative spans three key phases:
Year 1: Deep Data Cleansing, Standardization, Naming Conventions, Permission Models, and Metadata Optimization.
Year 2: Enterprise Migration to CyberArk Cloud.
Year 3: Advanced Modernization and High-Level Automation.
Currently halfway through Year 1, the bank requires a hands-on CyberArk SME Engineer to act as the technical authority. Working alongside a dedicated PM, BA, and engineering team, you will drive ongoing metadata normalization, programmatic onboarding automation, and core architecture enhancements to prepare the enterprise for cloud migration.
Key Responsibilities
Act as the primary Subject Matter Expert (SME) for CyberArk implementation, vault structure, and platform engineering across the organization.
Design and execute script-driven onboarding automation for target servers, accounts, and applications using Python, PowerShell, REST APIs, or PACLI.
Lead automated data cleansing efforts to address inconsistent naming conventions, permission frameworks, and missing metadata across target systems.
Integrate CyberArk solutions seamlessly with Active Directory (AD), Identity Management (IDM) frameworks, and core enterprise infrastructure.
Collaborate with project managers, business analysts, and security architects to establish governance baselines and streamlined onboarding workflows.
Prepare the existing environment structurally and operationalize configurations for future CyberArk Cloud migration.
Key Qualifications & Experience Required
Track Record: 8–10+ years of dedicated, hands-on CyberArk/PAM engineering and implementation experience.
End-to-End SME Expertise: Demonstrable track record leading full-lifecycle CyberArk deployments, architectural enhancements, and component builds (Vault, CPM, PSM, EPM, CP/CCP).
Heavy Automation & Scripting: Strong, proven expertise writing custom automation scripts in PowerShell or Python utilizing CyberArk REST APIs or SDKs for bulk onboarding and metadata updates.
Identity Integrations: Deep experience handling large-scale metadata synchronization and integrations with Active Directory (AD) and IDM platforms.
Reliability: Proven history of long-term project delivery within complex corporate or financial services environments.
Note: Industry background and certifications are secondary to demonstrable technical depth in practical CyberArk implementation and API scripting.