HCLTech
CyberArk PAM Engineer
United Kingdom
Posted about 22 hours ago
Get notified of more jobs like this · No spam, ever
How your CV stacks up
1Upload CV
2Analyse CV
3Improve CV
Upload your CV to see how well it fits this job role
?%
CyberArk PAM Engineer
Location
UK - Remote
Key Responsibilities
- Provide L3 support for CyberArk components (Vault, PVWA, CPM, PSM, PSMP, PTA, CCP).
- Troubleshoot complex issues and perform root cause analysis.
- Manage CyberArk upgrades, patching, backup, DR, and platform maintenance.
- Onboard privileged, service, and application accounts.
- Configure Safes, Platforms, CPM policies, and PSM connection components.
- Develop automation and reporting using PowerShell and CyberArk APIs.
- Develop & troubleshooting of PSM Connecters and CPM Plugins, and custom platforms for CyberArk.
- Support audits, compliance requirements, and PAM Project governance initiatives.
- Collaborate with infrastructure, security, and application teams.
- Own critical incidents through resolution, coordinate technical recovery, and provide clear stakeholder updates.
- Lead problem management by identifying recurring failures, documenting root causes, and implementing permanent corrective actions.
- Monitor platform health, service availability, capacity, replication, certificates, scheduled jobs, and infrastructure dependencies.
- Plan and execute high-availability and disaster-recovery tests, validate failover procedures, and maintain recovery runbooks.
- Review CyberArk architecture and configuration changes for security, scalability, performance, and operational supportability.
- Implement and validate security hardening, access controls, authentication integrations, credential-management policies, and session-monitoring controls.
- Integrate PAM services with Active Directory, LDAP, SIEM, ITSM, MFA, SSO, PKI, cloud platforms, and enterprise monitoring tools.
Mandatory to have
- CyberArk Certified Delivery Engineer (CDE).
- Develop & troubleshooting of PSM Connecters and CPM Plugins, and custom platforms for CyberArk.
- Knowledge to working with CI/CD, Cloud concepts.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Required Skills
- 8+ years of experience in privileged access management, including strong hands-on CyberArk PAM administration, engineering, and L3 production support.
- Advanced expertise in Digital Vault, PVWA, CPM, PSM, PSMP, PTA, Credential Provider/CCP, Safes, Platforms, account onboarding, credential rotation, and session management.
- Proven ability to diagnose complex component, connectivity, authentication, password-management, and session-launch failures using logs and root cause analysis.
- Experience installing, upgrading, patching, migrating, hardening, backing up, and recovering CyberArk PAM Self-Hosted environments.
- Hands-on development and troubleshooting of custom CPM plug-ins, PSM connection components, AutoIt-based connectors, web application connectors, and custom platforms.
- Strong knowledge of Windows Server, Linux/Unix, Active Directory, LDAP/LDAPS, DNS, load balancing, firewalls, TCP/IP, TLS/SSL certificates, and PKI.
- Experience integrating PAM with MFA, SSO, SIEM, ITSM, monitoring, ticketing, and directory services.
- Strong PowerShell scripting and REST API skills for onboarding, administration, health checks, reporting, and operational automation.
- Working knowledge of high availability, disaster recovery, capacity planning, performance monitoring, security hardening, and privileged access control principles.
- Experience working within ITIL-based incident, problem, change, release, and service-management processes, with clear technical documentation and stakeholder communication.
Preferred Skills
- CyberArk Certified Delivery Engineer (CDE).
- Hands-on experience with CyberArk Secrets Manager, Conjur, Credential Provider/CCP, application identity, non-human identities, and machine identity security.
- Exposure to Privilege Cloud, CyberArk Identity, Endpoint Privilege Manager, or broader Identity Security platform capabilities.
- Experience with Microsoft Azure, AWS, Kubernetes, Docker, CI/CD pipelines, Git-based workflows, and DevSecOps tooling.
- Integration experience with ServiceNow, Splunk or another SIEM platform, enterprise monitoring tools, MFA, SAML/OIDC-based SSO, and certificate services.
- Knowledge of security and regulatory frameworks such as ISO 27001, NIST Cybersecurity Framework, CIS Controls, PCI DSS, and audit evidence requirements.
- Experience designing PAM operating models, technical standards, runbooks, control documentation, and architecture or solution design artefacts.
- Strong mentoring, technical leadership, vendor coordination, and cross-functional collaboration skills.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Benefits
- A supportive, diverse, and global team with a brilliant culture.
- Competitive compensation and benefits that includes vacation per year, various insurances like Term life and Business Travel insurance. These are apart from the statutory benefits applicable in the country. Employee benefits are regulated by an internal policy that contains full details regarding the entitlement and conditions for the benefits as per the law of the land.
- Great opportunities to make the role your own, upskill yourself and get involved with exciting projects.
- Total Wellbeing is our focus. Alongside your professional excellence, you join the likeminded colleagues to create a larger impact within the company and society at large in your chosen area of passion - CSR Council, Diversity Council, Women Connect, Sparks – Engagement Champion to name a few.
- To know more about us visit – www.hcltech.com
- For more information on how we process your personal data, please refer to HCLTech’s Candidate Data Privacy Notice.
Trusted by 25,000+ job seekers
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location