CyberArk SME Engineer

A premier Tier 1 Investment Bank based in London, is currently undergoing a strategic, multi-year CyberArk Privileged Access Management (PAM) modernization initiative. The initiative spans three key phases:

• 
  

  Year 1: Deep Data Cleansing, Standardization, Naming Conventions, Permission Models, and Metadata Optimization.

  
  


• 
  

  Year 2: Enterprise Migration to CyberArk Cloud.

  
  


• 
  

  Year 3: Advanced Modernization and High-Level Automation.

  
  

Currently halfway through Year 1, the bank requires a hands-on CyberArk SME Engineer to act as the technical authority. Working alongside a dedicated PM, BA, and engineering team, you will drive ongoing metadata normalization, programmatic onboarding automation, and core architecture enhancements to prepare the enterprise for cloud migration.

Key Responsibilities

• 
  

  Act as the primary Subject Matter Expert (SME) for CyberArk implementation, vault structure, and platform engineering across the organization.

  
  


• 
  

  Design and execute script-driven onboarding automation for target servers, accounts, and applications using Python, PowerShell, REST APIs, or PACLI.

  
  


• 
  

  Lead automated data cleansing efforts to address inconsistent naming conventions, permission frameworks, and missing metadata across target systems.

  
  


• 
  

  Integrate CyberArk solutions seamlessly with Active Directory (AD), Identity Management (IDM) frameworks, and core enterprise infrastructure.

  
  


• 
  

  Collaborate with project managers, business analysts, and security architects to establish governance baselines and streamlined onboarding workflows.

  
  


• 
  

  Prepare the existing environment structurally and operationalize configurations for future CyberArk Cloud migration.

  
  

Key Qualifications & Experience Required

• 
  

  Track Record: 8–10+ years of dedicated, hands-on CyberArk/PAM engineering and implementation experience.

  
  


• 
  

  End-to-End SME Expertise: Demonstrable track record leading full-lifecycle CyberArk deployments, architectural enhancements, and component builds (Vault, CPM, PSM, EPM, CP/CCP).

  
  


• 
  

  Heavy Automation & Scripting: Strong, proven expertise writing custom automation scripts in PowerShell or Python utilizing CyberArk REST APIs or SDKs for bulk onboarding and metadata updates.

  
  


• 
  

  Identity Integrations: Deep experience handling large-scale metadata synchronization and integrations with Active Directory (AD) and IDM platforms.

  
  


• 
  

  Reliability: Proven history of long-term project delivery within complex corporate or financial services environments.

  
  


• 
  

  Note: Industry background and certifications are secondary to demonstrable technical depth in practical CyberArk implementation and API scripting.