CyberArk SME

Our client, a leading global supplier for IT services, requires Cyber Ark Subject Matter Expert to be based at their client's office in Wokingham, UK.

This is a fully onsite role .

This is a 6+ month temporary contract to start asap

Day rate:
Competitive Market rate

Our clinet is seeking a highly skilled and hands on Cyber Ark Subject Matter Expert (SME) to own, manage, and continuously enhance the Cyber Ark Privileged Access Management (PAM) platform end to end.

The role demands strong operational expertise, architectural understanding, and the ability to work closely with security, infrastructure, application, and compliance teams.

The Cyber Ark SME will act as the primary technical authority for the PAM platform, ensuring availability, security posture, integration, and alignment with enterprise risk and compliance requirements. This is a critical onshore role requiring strong stakeholder engagement, leadership, and problem-solving skills.

• Manage and support the Cyber Ark PAM platform end to end (PVWA, CPM, PSM, Vault).
• Onboard, manage, and maintain privileged accounts across servers, databases, applications, and cloud platforms.
• Perform daily operations, incident resolution, upgrades, patching, and health checks.
• Configure password rotation, session monitoring, and access controls.
• Support integration with Active Directory, SIEM, Service Now, and other enterprise tools.
• Ensure Cyber Ark platform meets security, audit, and compliance requirements.
• Act as the primary Cyber Ark SME, providing guidance and support to stakeholders.
• Own end-to-end management of the Cyber Ark PAM ecosystem including:
• PVWA
• CPM
• PSM / PSM-SSH
• Vault
• Ensure high availability, stability, scalability, and performance of the Cyber Ark platform.
• Perform routine maintenance, upgrades, patching, hardening, health checks, and DR testing.
• Monitor platform health and proactively resolve incidents, vulnerabilities, and performance issues.

• Configure, and manage:
  • Privileged account onboarding and offboarding
  • Password vaulting, rotation, reconciliation
  • Session monitoring, recording, and auditing
• Manage privileged access for:
  • Windows, Linux/Unix, Network devices
  • Databases
  • Cloud platforms (Azure)
  • Service, application, and Dev Ops accounts

• Integrate Cyber Ark with:
  • Active Directory / LDAP
  • SIEM tools (Sentinel)
  • Ticketing tools (Service Now)
  • Identity platforms (Azure AD, SSO solutions)
• Develop and maintain automation scripts using:
  • REST APIs
  • Power Shell / Python
  • Support PAM integrations for CI/CD and Dev Ops pipelines (Secrets Management).

• Act as SME for PAM best practices, Zero Trust principles, and least privilege.
• Support internal and external audits
• Produce compliance reports and evidence from Cyber Ark.
• Identify risks and recommend continuous security improvements.

• Serve as the primary point of contact for Cyber Ark-related discussions.
• Lead troubleshooting of complex, high-impact PAM issues.
• Contribute to architecture decisions, roadmaps, and platform strategy.
• Mentor junior team members and support knowledge transfer.

• 7+ years in Identity & Access Management with 5+ years hands-on Cyber Ark PAM experience.
• Proven expertise across:
  • Cyber Ark PAM-Self Hosted, Pcloud and/or EPM / PAM-as-a-Service
  • Vault administration and hardening
  • CPM and password lifecycle management
  • PSM / PSM-SSH configuration and troubleshooting
• Strong experience with onboarding complex environments (legacy + modern).
• Solid understanding of Windows, Linux/Unix, Active Directory, and networking basics.
• Experience with Power Shell scripting and Cyber Ark REST APIs.

• Strong L2/L3 support experience in production PAM environments.
• Ability to handle incident, problem, and change management effectively.
• Experience working in 24×7 enterprise environments with strict SLAs.

• Excellent communication and stakeholder management skills.
• Ability to explain complex security topics to non-technical audiences.
• Strong ownership mindset and accountability.
• Comfortable leading discussions, reviews, and decision-making forums

• Cyber Ark Defender
• Cyber Ark Sentry
• Cyber Ark PAM-CDE / EPM certifications

• Cyber Ark EPM (Endpoint Privilege Manager)
• Cyber Ark Secrets Management

• Zero Trust Architecture
• Cloud-native PAM…