GCS
CyberArk PAM Engineer
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Senior Cyber Security Engineer - Privileged Access Management
We are looking for a Senior Cyber Security Engineer specialising in Privileged Access Management (PAM), with CyberArk as the core platform. You will own the design, deployment, and health of the security tooling estate across our managed clients with PAM as your deepest expertise. Beyond CyberArk, this role carries breadth across the modern security stack: hands-on experience with Zscaler (ZIA/ZPA) and working capability across EDR, SIEM, vulnerability management, and email security.
Key Responsibilities
CyberArk & Privileged Access Management
- Estate Ownership: Own CyberArk design, deployment, and operation across managed clients: vaulting, session management, secrets management, and Privileged Threat Analytics (PTA).
- Onboarding Programmes: Design PAM onboarding programmes for new clients: discovery, scoping, policy design, and rollout.
- Identity Stack Integration: Integrate PAM with the wider identity stack: Entra ID, conditional access, MFA, and just-in-time (JIT) access patterns.
- Audit & Compliance: Set privileged access standards and evidence them for client audits (ISO 27001, Cyber Essentials Plus).
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Security Tooling & Engineering
- Tooling Estate: Deploy, configure, and maintain EDR, SIEM integrations, vulnerability scanning, and email security.
- Zero Trust & Zscaler: Support Zscaler (ZIA/ZPA) deployment and policy work alongside Zero Trust leads.
- Health & Currency: Own tooling health: version currency, coverage gaps, tuning quality, and integration reliability.
- Automation: Automate deployment and operational tasks with scripts and APIs; contribute to the shared automation library.
Service & Quality
- Act as senior escalation for identity and tooling incidents; support major incident response.
- Document designs, runbooks, and standards for operational teams.
- Contribute tooling and PAM expertise to service reviews and solution scoping.
- Adopt AI-assisted workflows for diagnostics, configuration review, and documentation.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Experience & Requirements
- Full right to work in the UK (no sponsorship offered)
- 5+ years in security engineering with 2+ years of hands-on CyberArk design and administration (PAM Self-Hosted or Privilege Cloud).
- Experience deploying or operating Zscaler (ZIA/ZPA) and at least two of: EDR platforms, SIEM, vulnerability management, email security.
- Strong scripting capability (PowerShell or Python) applied to security tooling automation and integration.
- MSP/MSSP or multi-client environment experience preferred; client audit exposure an advantage.
Certifications
- Essential (or equivalent hands-on experience): CyberArk Defender certification (CyberArk Sentry strongly preferred).
- Desirable: CyberArk Guardian, Zscaler professional-level certification (ZIA/ZPA), Microsoft SC-300, SC-200, AZ-500, or EDR vendor certifications.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location