Gazelle Global
CyberArk PAM Engineer
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
The Role
We are seeking a highly skilled and hands-on CyberArk Subject Matter Expert (SME) to own, manage, and continuously enhance the CyberArk Privileged Access Management (PAM) platform end to end.
The role demands strong operational expertise, architectural understanding, and the ability to work closely with security, infrastructure, application, and compliance teams. The CyberArk SME will act as the primary technical authority for the PAM platform, ensuring availability, security posture, integration, and alignment with enterprise risk and compliance requirements. This is a critical onshore role requiring strong stakeholder engagement, leadership, and problem-solving skills.
Responsibilities
CyberArk Platform Ownership & Operations
- Manage and support the CyberArk PAM platform end to end (PVWA, CPM, PSM, Vault).
- Onboard, manage, and maintain privileged accounts across servers, databases, applications, and cloud platforms.
- Perform daily operations, incident resolution, upgrades, patching, and health checks.
- Configure password rotation, session monitoring, and access controls.
- Support integration with Active Directory, SIEM, ServiceNow, and other enterprise tools.
- Ensure CyberArk platform meets security, audit, and compliance requirements.
- Act as the primary CyberArk SME, providing guidance and support to stakeholders.
- Own end-to-end management of the CyberArk PAM ecosystem including:
- PVWA
- CPM
- PSM / PSM-SSH
- Vault
- Ensure high availability, stability, scalability, and performance of the CyberArk platform.
- Perform routine maintenance, upgrades, patching, hardening, health checks, and DR testing.
- Monitor platform health and proactively resolve incidents, vulnerabilities, and performance issues.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Privileged Access Lifecycle Management
- Configure, and manage:
- Privileged account onboarding and offboarding
- Password vaulting, rotation, reconciliation
- Session monitoring, recording, and auditing
- Manage privileged access for:
- Windows, Linux/Unix, Network devices
- Databases
- Cloud platforms (Azure)
- Service, application, and DevOps accounts
Integration & Automation
- Integrate CyberArk with:
- Active Directory / LDAP
- SIEM tools (Sentinel)
- Ticketing tools (ServiceNow)
- Identity platforms (Azure AD, SSO solutions)
- Develop and maintain automation scripts using:
- REST APIs
- PowerShell / Python
- Support PAM integrations for CI/CD and DevOps pipelines (Secrets Management).
Security, Risk & Compliance
- Act as SME for PAM best practices, Zero Trust principles, and least privilege.
- Support internal and external audits.
- Produce compliance reports and evidence from CyberArk.
- Identify risks and recommend continuous security improvements.
Stakeholder & Technical Leadership
- Serve as the primary point of contact for CyberArk-related discussions.
- Lead troubleshooting of complex, high-impact PAM issues.
- Contribute to architecture decisions, roadmaps, and platform strategy.
- Mentor junior team members and support knowledge transfer.
Essential skills/knowledge/experience
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Core CyberArk Expertise
- 7+ years in Identity & Access Management with 5+ years hands-on CyberArk PAM experience.
- Proven expertise across:
- CyberArk PAM-Self Hosted, Pcloud and/or EPM / PAM-as-a-Service
- Vault administration and hardening
- CPM and password lifecycle management
- PSM / PSM-SSH configuration and troubleshooting
- Strong experience with onboarding complex environments (legacy + modern).
- Solid understanding of Windows, Linux/Unix, Active Directory, and networking basics.
- Experience with PowerShell scripting and CyberArk REST APIs.
Operational & Support Experience
- Strong L2/L3 support experience in production PAM environments.
- Ability to handle incident, problem, and change management effectively.
- Experience working in 24x7 enterprise environments with strict SLAs.
Soft Skills
- Excellent communication and stakeholder management skills.
- Ability to explain complex security topics to non-technical audiences.
- Strong ownership mindset and accountability.
- Comfortable leading discussions, reviews, and decision-making forums.
Desirable skills/knowledge/experience
CyberArk certifications
- CyberArk Defender
- CyberArk Sentry
- CyberArk PAM-CDE / EPM certifications
Experience with
- CyberArk EPM (Endpoint Privilege Manager)
- CyberArk Secrets Management
Exposure to
- Zero Trust Architecture
- Cloud-native PAM patterns
- DevSecOps and container security
- Prior experience in regulated industries (Energy Sector)
Experience leading
- PAM transformation or platform refresh programs.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location