Cyberark SME

CyberArk Subject Matter Expert (SME) 💰 £580/day (Inside IR35) 📍 Wokingham (Fully onsite) 📅 6-Month Contract Our client is looking for highly experienced, hands-on CyberArk Subject Matter Experts (SMEs) to take end-to-end ownership of an enterprise CyberArk Privileged Access Management (PAM) platform. This is a senior technical role requiring deep hands-on expertise across CyberArk Vault, PVWA, CPM and PSM/PSM SSH, combined with strong production support, integration and automation experience. You'll act as the primary technical authority for the PAM platform, ensuring its availability, security, performance and compliance. Key Responsibilities

• Own and manage the CyberArk PAM platform end to end, including Vault, PVWA, CPM and PSM/PSM SSH.
• Manage privileged account onboarding/offboarding, vaulting, password rotation and reconciliation.
• Configure and manage session monitoring, recording, auditing and privileged access controls.
• Manage privileged access across Windows, Linux/Unix, databases, network devices, Azure and application/service accounts.
• Perform CyberArk upgrades, patching, hardening, health checks and DR testing.
• Provide hands-on L2/L3 production support and troubleshoot complex PAM incidents.
• Ensure platform high availability, scalability, stability and performance.
• Integrate CyberArk with Active Directory/LDAP, Azure AD, Sentinel, ServiceNow and SSO solutions.
• Develop automation using CyberArk REST APIs, PowerShell and Python.
• Support CyberArk Secrets Management integrations with CI/CD and DevOps pipelines.
• Apply PAM best practices including Zero Trust and Least Privilege.
• Support internal/external audits and produce CyberArk compliance evidence and reporting.
• Contribute to PAM architecture, platform roadmaps and security strategy.
• Mentor junior engineers and provide technical leadership across CyberArk initiatives. Essential Skills
• 7+ years' Identity & Access Management (IAM) experience.
• 5+ years' hands-on CyberArk PAM experience.
• Deep expertise with CyberArk Vault, PVWA, CPM and PSM/PSM SSH.
• CyberArk PAM platform administration, configuration and troubleshooting.
• Strong experience with Vault administration and hardening.
• Strong CPM/password lifecycle management experience.
• Experience onboarding complex legacy and modern environments into CyberArk.
• Strong knowledge of Windows, Linux/Unix and Active Directory.
• Experience with PowerShell and CyberArk REST APIs.
• Strong L2/L3 production support experience within enterprise PAM environments.
• Experience managing incidents, problems and changes within environments operating to strict SLAs.
• Strong stakeholder management and ability to act as the technical authority for CyberArk. Desirable Skills
• CyberArk Defender, Sentry, PAM CDE or EPM certifications.
• CyberArk EPM – Endpoint Privilege Manager.
• CyberArk Secrets Management.
• CyberArk Self-Hosted, Privilege Cloud / PAM as a Service experience.
• Azure / cloud PAM experience.
• Microsoft Sentinel and ServiceNow integrations.
• Zero Trust Architecture and Least Privilege.
• DevSecOps and CI/CD integration.
• Cloud-native PAM patterns.
• Experience leading PAM transformation or platform refresh programmes.
• Experience within the Energy sector or another regulated industry. Please apply with your Cv and we'll be in touch. Thank you!