Wokingham
Our client, a leading global supplier for IT services, requires CyberArk Subject Matter Expert to be based at their client's office in Wokingham, UK. This is a fully onsite role . This is a 6+ month temporary contract to start asap Day rate: Competitive Market rate Our clinet is seeking a highly skilled and hands on CyberArk Subject Matter Expert (SME) to own, manage, and continuously enhance the CyberArk Privileged Access Management (PAM) platform end to end. The role demands strong operational expertise, architectural understanding, and the ability to work closely with security, infrastructure, application, and compliance teams. The CyberArk SME will act as the primary technical authority for the PAM platform, ensuring availability, security posture, integration, and alignment with enterprise risk and compliance requirements. This is a critical onshore role requiring strong stakeholder engagement, leadership, and problem-solving skills. • Manage and support the CyberArk PAM platform end to end (PVWA, CPM, PSM, Vault)., • Onboard, manage, and maintain privileged accounts across servers, databases, applications, and cloud platforms., • Perform daily operations, incident resolution, upgrades, patching, and health checks., • Configure password rotation, session monitoring, and access controls., • Support integration with Active Directory, SIEM, ServiceNow, and other enterprise tools., • Ensure CyberArk platform meets security, audit, and compliance requirements., • Act as the primary CyberArk SME, providing guidance and support to stakeholders., • Own end-to-end management of the CyberArk PAM ecosystem including:, • PVWA, • CPM, • PSM / PSM-SSH, • Vault, • Ensure high availability, stability, scalability, and performance of the CyberArk platform., • Perform routine maintenance, upgrades, patching, hardening, health checks, and DR testing., • Monitor platform health and proactively resolve incidents, vulnerabilities, and performance issues., • Configure, and manage:, • Privileged account onboarding and offboarding, • Password vaulting, rotation, reconciliation, • Session monitoring, recording, and auditing, • Manage privileged access for:, • Windows, Linux/Unix, Network devices, • Databases, • Cloud platforms (Azure), • Service, application, and DevOps accounts, • Integrate CyberArk with:, • Active Directory / LDAP, • SIEM tools (Sentinel), • Ticketing tools (ServiceNow), • Identity platforms (Azure AD, SSO solutions), • Develop and maintain automation scripts using:, • REST APIs, • PowerShell / Python, • Support PAM integrations for CI/CD and DevOps pipelines (Secrets Management)., • Act as SME for PAM best practices, Zero Trust principles, and least privilege., • Support internal and external audits, • Produce compliance reports and evidence from CyberArk., • Identify risks and recommend continuous security improvements., • Serve as the primary point of contact for CyberArk-related discussions., • Lead troubleshooting of complex, high-impact PAM issues., • Contribute to architecture decisions, roadmaps, and platform strategy., • Mentor junior team members and support knowledge transfer., • 7+ years in Identity & Access Management with 5+ years hands-on CyberArk PAM experience., • Proven expertise across:, • CyberArk PAM-Self Hosted, Pcloud and/or EPM / PAM-as-a-Service, • Vault administration and hardening, • CPM and password lifecycle management, • PSM / PSM-SSH configuration and troubleshooting, • Strong experience with onboarding complex environments (legacy + modern)., • Solid understanding of Windows, Linux/Unix, Active Directory, and networking basics., • Experience with PowerShell scripting and CyberArk REST APIs., • Strong L2/L3 support experience in production PAM environments., • Ability to handle incident, problem, and change management effectively., • Experience working in 24×7 enterprise environments with strict SLAs., • Excellent communication and stakeholder management skills., • Ability to explain complex security topics to non-technical audiences., • Strong ownership mindset and accountability., • Comfortable leading discussions, reviews, and decision-making forums, • CyberArk Defender, • CyberArk Sentry, • CyberArk PAM-CDE / EPM certifications, • CyberArk EPM (Endpoint Privilege Manager), • CyberArk Secrets Management, • Zero Trust Architecture, • Cloud-native PAM patterns, • DevSecOps and container security, • Prior experience in regulated industries (Energy Sector)., • Experience leading PAM transformation or platform refresh programs Due to the volume of applications received, unfortunately we cannot respond to everyone. If you do not hear back from us within 7 days of sending your application, please assume that you have not been successful on this occasion. Please do keep an eye on our website jobs/ for future roles #J-18808-Ljbffr