CyberArk Engineer

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Report directly to the Cyber Operations Lead and collaborate closely with SOC engineers.

• Manage the CyberArk ticket queue from L2 to L4, serving as the primary escalation point.

• Triage, diagnose, resolve, and close CyberArk incidents and requests within the established SLA.

• Troubleshoot issues relating to vault, CPM rotation failures, PSM session problems, PVWA faults, and integration disruptions involving Entra ID, MFA, and SIEM.

• Conduct root-cause analysis and oversee escalations with the CyberArk vendor.

• Manage account onboarding and offboarding, implement safe and policy changes, and perform access reviews.

• Apply patches and perform upgrades on CyberArk environments.

• Renew certificates and conduct disaster-recovery checks in both Self-Hosted and Privilege Cloud environments.

• Maintain documentation such as runbooks and known-error records.

• Operate within ITSM change control frameworks.

• Provide support for privileged access management across managed client estates.

⛳️ Requirements

• A minimum of 3 years of hands-on experience in CyberArk administration and troubleshooting within production environments, including CPM, PSM, PVWA, and vault.

• Demonstrated capability in L3/L4 fault resolution under SLA constraints.

• Adherence to ticket-queue and change-control protocols in a managed service environment.

• Proficiency in PowerShell scripting for diagnosis and repair purposes.

• Strong understanding of Identity & Access Management principles.

• Knowledgeable in ITSM & Service Management methodologies.

• Competent in Incident Management processes.

• Familiarity with Security Tooling & EDR solutions.

• Practitioner-level supporting skills in cloud technologies, networking, network security, monitoring, scripting, vulnerability management, and documentation.

• Desirable: Defender/Sentry certification, with practical experience being prioritized over certification.

• Desirable: Exposure to Entra ID, EDR, SIEM, or Zscaler environments.

• Desirable: Background in Managed Service Provider (MSP) operations.

• Must reside in the UK or meet the requirements for UK-hours and security screening conditions.

🏝️ Benefits

• Contract engagement opportunities.

• Flexible remote work options.

• Coverage aligned with UK working hours.

• Security screening procedures in place.