CyberArk SME Engineer

A premier Tier 1 Investment Bank based in London, is currently undergoing a strategic, multi-year CyberArk Privileged Access Management (PAM) modernization initiative. The initiative spans three key phases:

• Year 1: Deep Data Cleansing, Standardization, Naming Conventions, Permission Models, and Metadata Optimization.

• Year 2: Enterprise Migration to CyberArk Cloud.

• Year 3: Advanced Modernization and High-Level Automation.

Currently halfway through Year 1, the bank requires a hands-on CyberArk SME Engineer to act as the technical authority. Working alongside a dedicated PM, BA, and engineering team, you will drive ongoing metadata normalization, programmatic onboarding automation, and core architecture enhancements to prepare the enterprise for cloud migration.

Key Responsibilities

• Act as the primary Subject Matter Expert (SME) for CyberArk implementation, vault structure, and platform engineering across the organization.

• Design and execute script-driven onboarding automation for target servers, accounts, and applications using Python, PowerShell, REST APIs, or PACLI.

• Lead automated data cleansing efforts to address inconsistent naming conventions, permission frameworks, and missing metadata across target systems.

• Integrate CyberArk solutions seamlessly with Active Directory (AD), Identity Management (IDM) frameworks, and core enterprise infrastructure.

• Collaborate with project managers, business analysts, and security architects to establish governance baselines and streamlined onboarding workflows.

• Prepare the existing environment structurally and operationalize configurations for future CyberArk Cloud migration.

Key Qualifications & Experience Required

• Track Record: 8–10+ years of dedicated, hands-on CyberArk/PAM engineering and implementation experience.

• End-to-End SME Expertise: Demonstrable track record leading full-lifecycle CyberArk deployments, architectural enhancements, and component builds (Vault, CPM, PSM, EPM, CP/CCP).

• Heavy Automation & Scripting: Strong, proven expertise writing custom automation scripts in PowerShell or Python utilizing CyberArk REST APIs or SDKs for bulk onboarding and metadata updates.

• Identity Integrations: Deep experience handling large-scale metadata synchronization and integrations with Active Directory (AD) and IDM platforms.

• Reliability: Proven history of long-term project delivery within complex corporate or financial services environments.

• Note: Industry background and certifications are secondary to demonstrable technical depth in practical CyberArk implementation and API scripting.