Security Engineer

CyberArk PAM Engineer – Investment Banking

Location: London (Hybrid – 2 days per week)

Salary: Up to £80,000 + Benefits

Position: Permanent

Level: AVP

I'm currently working with a leading global investment bank that is looking to appoint an experienced CyberArk PAM Engineer to join its growing Cyber Security function.

The organisation is undergoing significant technology transformation, with continued investment in its cybersecurity capabilities, infrastructure and security engineering.

This is a fantastic opportunity for a technically strong, hands-on engineer who enjoys working across a broad technology environment and wants to play a key role in developing, maintaining and enhancing Privileged Access Management (PAM) capabilities.

The Role

You'll be responsible for the day-to-day engineering, support and continuous improvement of the organisation's CyberArk PAM environment, working closely with infrastructure, identity, application and wider security teams.

Key responsibilities include:

• Engineering, configuring and maintaining the CyberArk PAM platform.
• Onboarding privileged, service and application accounts, including Safe management and credential rotation.
• Managing privileged sessions, access controls, reconciliation and authentication processes.
• Troubleshooting complex CyberArk issues, including failed rotations, connectivity and integration problems.
• Supporting platform upgrades, patching, resilience and disaster recovery.
• Integrating PAM solutions with Active Directory, Microsoft Entra ID, cloud platforms and enterprise applications.
• Developing automation using PowerShell, Python and REST APIs.
• Supporting continuous improvements to privileged access security and operational processes.

What We're Looking For

• Strong hands-on CyberArk PAM engineering experience, ideally within a large enterprise environment.
• Experience with CyberArk components such as PVWA, CPM and PSM.
• Proven experience with privileged account onboarding, credential management, password rotation and Safe configuration.
• Strong understanding of Active Directory, Windows Server and wider infrastructure technologies.
• Experience troubleshooting and supporting complex PAM environments.
• Exposure to scripting and automation using PowerShell, Python or APIs.
• Knowledge of Azure and hybrid-cloud environments.
• Previous experience within financial services or investment banking would be highly advantageous.

We're particularly interested in engineers with a broad technical background who are comfortable taking ownership of complex challenges, rather than those focused purely on governance or operational monitoring.

Why Consider This Opportunity?

• Join a globally recognised financial services organisation.
• Be part of a growing cybersecurity function undergoing significant investment and transformation.
• Gain exposure to complex, enterprise-scale security infrastructure.
• Work across a broad range of technologies with genuine hands-on engineering responsibilities.
• Opportunity to contribute to the ongoing development and maturity of PAM capabilities.
• Hybrid working arrangements with approximately two days per week in the London office.

Interested?

If you're a CyberArk Engineer, PAM Engineer or IAM Engineer with strong hands-on privileged access management experience and are interested in exploring a new opportunity, I'd love to hear from you.