Posted 19 days ago
Description
We are looking for a Security Engineer with strong hands-on experience in CyberArk and Privileged Access Management (PAM) to strengthen our Cyber Security team.
This role offers the opportunity to engineer, administer, and continuously improve identity security capabilities, with a primary focus on CyberArk, privileged account protection, secrets management, and access control across a global financial services environment.
- Administer, configure, and enhance CyberArk PAM capabilities, including account onboarding, Safes, platforms, policies, credential rotation, session management, and access workflows.
- Manage the privileged account lifecycle, least-privilege controls, break-glass access, access reviews, and privileged access governance.
- Troubleshoot PAM issues, monitor security controls, and support platform upgrades, integrations, and continuous improvements.
- Support identity security across Windows, Linux, cloud platforms, databases, directory services, and service accounts.
- Contribute to secrets management, key management, PKI, and certificate management solutions.
- Engineer and optimise security tools to improve threat detection, incident response, and security operations.
- Automate operational tasks, develop analytical tools, and produce security metrics, control reports, and audit evidence.
- Collaborate with infrastructure, IT, and security teams on incident handling, system hardening, vulnerability management, and security standards.
- Hands-on experience with CyberArk PAM or an equivalent Privileged Access Management solution.
- Practical knowledge of CyberArk components and capabilities, including credential vaulting, password rotation, session monitoring, account onboarding, and access policies.
- Understanding of Microsoft Entra ID, identity protection, privileged access governance, and access control technologies.
- Experience with secrets and key management tools such as HashiCorp Vault, Conjur, or equivalent.
- Knowledge of PKI and certificate management tools such as Venafi, DigiCert, or equivalent.
- Experience securing Windows, Linux, cloud environments, databases, directory services, and service accounts.
- Understanding of security frameworks and standards such as CIS and NIST.
- Knowledge of incident response, vulnerability management, security control assurance, and audit requirements.
- Strong troubleshooting, communication, documentation, and stakeholder management skills.
- A proactive security professional with a strong interest in identity security and privileged access protection.
- Someone who takes ownership, demonstrates technical curiosity, and thrives in a fast-paced environment.
- A collaborative team player who can work effectively with technical teams, auditors, control owners, and business stakeholders.
- A candidate who is committed to continuous improvement, operational resilience, and security best practices.
Experience: 5+ years in Information Security preferred; candidates with less experience will also be considered.
#J-18808-Ljbffr
