CyberArk PAM Engineer - sought by investment bank based in London - Contract - Hybrid inside IR35 Key ResponsibilitiesLead the design, implementation, and optimisation of CyberArk PAM solutions.Manage CyberArk components including Vault, CPM, PSM, PSMP, CCP, PTA, AIM.Plan and execute major version upgrades and migrations.Automate credential onboarding, rotation, and decommissioning.Develop and maintain Safes, RBAC structures, and master policies aligned to NIST 800-53 and Zero Trust.Build custom connectors for non-standard platforms (e.g., Oracle Cloud).Provide SME-level support and troubleshooting across CyberArk environments.Integrate CyberArk with DevOps pipelines using AIM/AAM/Conjur.Maintain documentation and deliver training to internal teams.Required Skills and Experience10+ years of hands-on experience with CyberArk PAM suite.Strong knowledge of privileged access concepts, RBAC, and compliance frameworks (NIST, ISO 27001).Experience with Linux (RHEL 9), Windows Server, Oracle DB, and cloud platforms.Scripting and automation skills (PowerShell, REST APIs).Proven track record in CyberArk upgrades and custom integrations.Excellent communication and stakeholder engagement skills.DesirableExperience in financial services or banking environments.Familiarity with Sentinel, Defender XDR, and SIEM integrations.CyberArk Defender and Sentry certifications.Please apply within for further details - Matt Holmes, Harvey Nash