At a Glance
- Tasks: Build and operate CyberArk solutions for secure cloud access and infrastructure.
- Company: Join a leading tech firm focused on innovative security solutions.
- Benefits: Competitive pay, hybrid work model, and opportunities for professional growth.
- Other info: Dynamic role with potential for career advancement in a fast-paced environment.
- Why this job: Make a real impact in cloud security while working with cutting-edge technology.
- Qualifications: Experience with CyberArk, cloud environments, and strong design capabilities.
Our client is looking for a highly skilled CyberArk PAM Engineer with hands-on experience with CyberArk Identity Security Platform Shared Services (ISPSS), Secure Cloud Access (SCA) and Secure Infrastructure Access (SIA) to build and operate a comprehensive privileged access capability for clients' Public Cloud environments. A working knowledge of Secrets Rotation Service (SRS) & Secure Web Sessions (SWS) would be beneficial.
Ideal Candidate Profile:
- Senior CyberArk engineer with real-world SCA and SIA delivery experience
- Comfortable operating across access models and protocols
- Strong design to build capability
- Able to lead PAM access patterns in complex cloud environments
Start Date: 22nd June
Duration: 250 days
Pay Rate: £445 (PLEASE NOTE: Employer NI is paid for by the client)
Total Daily Earnings: £505 (includes rolled up holiday)
IR35 Status: Inside
Location: London/Hybrid (1 to 2 days per week)
Key Responsibilities:
- Secure Cloud Access (SCA)
- Build and operate CyberArk Secure Cloud Access (SCA)
- Enable secure, audited cloud console and command line access to:
- Azure - Azure Portal and cloud-native access paths
- AWS - AWS Console and CLI
- Configure:
- Identity based access
- Time bound and approval-based access
- Session recording and audit controls
- Define and document SCA policy patterns aligned to least privilege and JIT access.
- Essential Skills & Experience (Must Have):
- Hands-on experience with CyberArk Secure Cloud Access (SCA).
- Hands-on experience with CyberArk Secure Infrastructure Access (SIA).
- CyberArk Identity Security Platform Shared Services (ISPSS)
- Proven experience delivering cloud-based privileged access in Azure and/or AWS.
- Strong understanding of:
- Web based console access (HTTPS)
- Ephemeral access models
- Credential life cycle and password rotation
- Experience with approval driven access and governance workflows.
- Desirable Experience:
- Integration of CyberArk with ServiceNow
- API driven automation (PowerShell, Python)
- Experience with managing database technologies and applications
- Experience with Secrets Rotation Service (SRS)
- Experience in regulated or audit driven environments
- Exposure to GCP environments
- Broader CyberArk PAM SaaS experience
- Secure Infrastructure Access (SIA) - Ephemeral Access (ZSP):
- Build and operate CyberArk Secure Infrastructure Access (SIA).
- Enable secure, audited cloud virtual machine access via RDP & SSH to:
- Azure
- AWS
- Use Zero Standing Privilege wherever possible and vaulted credentials where not.
- Configure:
- Connector Servers
- Connector Management Agents
- Supporting software
- Management Pools and Network IDs
- Onboarding must be highly dynamic, automated wherever possible and self-service where not. This will require working closely with the PAM Developers to define the workflows required for Terraform automation.
- Access Policy & Credential Management (SIA) - essential skills:
- Define and implement SIA policies, platforms and plugins for:
- RDP
- SSH
- Access Policy & Credential Management (SIA) - desirable skills:
- Define and implement SIA access policies for:
- MSSQL
- Oracle
- PostgreSQL
- Where Vaulted Credentials are used, design and deploy password rotation controls via Secrets Rotation Service for:
- Windows platforms
- Linux platforms
- Create scripts to enable efficient handling of operational activities, eg bulk password change API scripts.
To apply for this CyberArk PAM Engineer contract job, please click the button below and submit your latest CV.
Curo Services endeavours to respond to all applications, however this may not always be possible during periods of high volume. Thank you for your patience.
Curo Services is a trading name of Curo Resourcing Ltd and acts as an Employment Business for contract and temporary recruitment as well as an Employment Agency in relation to permanent vacancies.
Cyberark PAM Engineer: Cyberark, PAM, Privileged Access Manager, SCA, SIA, Secure Cloud Access in London employer: Curo Services
Curo Services is an exceptional employer, offering a dynamic work culture that fosters innovation and collaboration in the heart of London. With a focus on employee growth, we provide opportunities for professional development and hands-on experience with cutting-edge technologies like CyberArk, ensuring that our team members are well-equipped to excel in their roles. Our hybrid working model promotes a healthy work-life balance, making Curo Services an attractive choice for those seeking meaningful and rewarding employment in the tech industry.
StudySmarter Expert Advice🤫
We think this is how you could land Cyberark PAM Engineer: Cyberark, PAM, Privileged Access Manager, SCA, SIA, Secure Cloud Access in London
✨Tip Number 1
Network like a pro! Reach out to your connections in the CyberArk and cloud security space. Attend meetups or webinars, and don’t be shy about asking for introductions. You never know who might have the inside scoop on job openings!
✨Tip Number 2
Show off your skills! Create a portfolio or GitHub repository showcasing your CyberArk projects or any relevant automation scripts. This gives potential employers a tangible look at what you can do, making you stand out from the crowd.
✨Tip Number 3
Prepare for interviews by brushing up on common CyberArk scenarios and challenges. Practice explaining your past experiences with SCA and SIA clearly and confidently. We want you to shine when it comes to discussing your hands-on experience!
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets noticed. Plus, we love seeing candidates who are proactive about their job search. Let’s get you that CyberArk PAM Engineer role!
We think you need these skills to ace Cyberark PAM Engineer: Cyberark, PAM, Privileged Access Manager, SCA, SIA, Secure Cloud Access in London
Some tips for your application 🫡
Tailor Your CV:Make sure your CV highlights your hands-on experience with CyberArk, SCA, and SIA. We want to see how your skills match the job description, so don’t be shy about showcasing relevant projects or achievements!
Craft a Compelling Cover Letter:Your cover letter is your chance to shine! Use it to explain why you’re the perfect fit for the CyberArk PAM Engineer role. Share specific examples of your experience and how they relate to the responsibilities outlined in the job description.
Showcase Your Technical Skills:Since this role requires a strong understanding of cloud environments and privileged access management, make sure to list any relevant certifications or technical skills. We love seeing candidates who are proactive about their professional development!
Apply Through Our Website:Don’t forget to submit your application through our website! It’s the best way for us to receive your CV and cover letter, and we can’t wait to see what you bring to the table.
How to prepare for a job interview at Curo Services
✨Know Your CyberArk Inside Out
Make sure you brush up on your knowledge of CyberArk, especially the Secure Cloud Access (SCA) and Secure Infrastructure Access (SIA) features. Be ready to discuss your hands-on experience and how you've implemented these in real-world scenarios.
✨Demonstrate Your Design Skills
Prepare to showcase your design-to-build capabilities. Think about specific projects where you’ve led PAM access patterns in complex cloud environments and be ready to explain your approach and the outcomes.
✨Familiarise Yourself with Access Models
Since the role involves operating across various access models and protocols, ensure you can confidently discuss ephemeral access models and credential lifecycle management. Have examples ready that highlight your understanding and experience.
✨Showcase Your Automation Knowledge
If you have experience with API-driven automation using PowerShell or Python, make sure to highlight this. Discuss any relevant scripts or automation workflows you've created, especially those that enhance efficiency in managing privileged access.
