Security Engineer - Privileged Identity

We're working with a global investment bank in London that is looking to hire a Security Engineer – Privileged Identity into its cybersecurity team. This is a hands-on security engineering role with an approximately 50/50 split between CyberArk/PAM and broader security engineering projects. You'll need practical CyberArk experience, but this isn't a pure CyberArk support role. Alongside PAM, you'll get exposure to wider security engineering projects across identity, automation, secrets management, cloud and preventative security controls. You'll need hands-on experience with CyberArk and Privileged Access Management, with knowledge across areas such as:

• CyberArk PAM administration and engineering
• Privileged and service account management
• Safes, RBAC, platforms and policies
• Credential rotation and secrets management
• Application and third-party integrations
• Automation of PAM processes For the other side of the role, we're looking for broader security engineering capability or an appetite to develop further across:
• Security tooling implementation and integration
• Identity security and least privilege
• Automation using PowerShell and/or Python
• Secrets and certificate management
• Windows Server and Active Directory
• Linux and enterprise networking
• Cloud security across Azure, AWS or similar environments
• Testing and implementing new preventative security controls You don't need to be an expert across every area. The key is having a solid grounding in CyberArk/PAM alongside broader technical skills and an interest in developing further as a security engineer. Strong communication, reporting and documentation skills are also important. Salary: £50,000–£60,000 base Location: London – 2 days onsite per week Please note: sponsorship is not available for this position. You must already have the right to work in the UK.