CyberArk PAM Engineer

Robert Half Technology are assisting UK's market leading financial services organisation to recruit a Cyber Ark PAM Engineer on a 6-12 month contract basis - Hybrid working - London based The Cyber Ark PAM Engineer will be responsible for designing, implementing, and operating privileged access management capabilities across cloud environments, with a focus on Cyber Ark Secure Cloud Access (SCA) and Secure Infrastructure Access (SIA).

Role The Cyber Ark PAM Engineer will build, configure, and operate Cyber Ark Secure Cloud Access (SCA) and Secure Infrastructure Access (SIA) platforms. Deliver secure, audited access to Azure and AWS environments through cloud consoles, command-line interfaces, RDP, and SSH. Implement and manage Zero Standing Privilege (ZSP), Just-in-Time (JIT) access, approval-based access controls, session monitoring, and auditing capabilities. Configure and manage Cyber Ark components including Connector Servers, Connector Management Agents, Management Pools, Network IDs, and supporting software.

Define and implement access policies, platforms, and plugins for RDP and SSH access. Design and implement privileged access controls for cloud-hosted infrastructure and, where applicable, database platforms including Microsoft SQL Server, Oracle, and Postgre

SQL. Design and deploy credential lifecycle management and password rotation controls using Cyber Ark Secrets Rotation Service (SRS) across Windows and Linux platforms. Develop scripts and automation solutions to support operational activities and onboarding processes using APIs and infrastructure-as-code approaches. Work closely with PAM Developers to define and implement automated onboarding and approval workflows, including Terraform and Service Now integrations. Integrate privileged access governance processes with Service Now to provide approval traceability, audit evidence, and operational efficiency.

Define, document, and maintain PAM standards, onboarding patterns, policies, runbooks, and operational procedures. Support compliance, governance, assurance, and audit activities. Collaborate with Cloud, Security, Identity, Infrastructure, Network, and third-party delivery teams to deliver PAM services across the organisation. Act as a technical lead for privileged access patterns and best practices within complex cloud environments. Profile The Cyber Ark PAM Engineer will have hands-on experience with Cyber Ark Secure Cloud Access (SCA).

Hands-on experience with Cyber Ark Secure Infrastructure Access (SIA). Proven experience delivering privileged access management solutions within Azure and/or AWS environments. Strong understanding of cloud access models, web-based console access, ephemeral access, Zero Standing Privilege, and credential lifecycle management. Experience implementing approval-driven access controls and governance workflows. Strong knowledge of Cyber Ark PAM SaaS capabilities and privileged access best practices.

Experience designing and implementing secure access policies, authentication controls, and privileged access governance frameworks. Ability to work across multiple access protocols and technologies, including HTTPS, SSH, and RDP. Strong design, implementation, and operational support capabilities. Excellent stakeholder management and collaboration skills across security, cloud, infrastructure, and engineering teams. Company UK's market leading financial services organisation with offices in London Hybrid working Salary & Benefits The salary range/rates of pay is dependent upon your experience, qualifications or training .

Robert Half Ltd acts as an employment business for temporary positions and an employment agency for permanent positions. Robert Half is committed to diversity, equity and inclusion. Suitable candidates with equivalent qualifications and more or less experience can apply. Rates of pay and salary ranges are dependent upon your experience, qualifications and training. If you wish to apply, please read our Privacy Notice describing how we may process, disclose and store your personal data: