Security Engineer – Privileged Identity

We’re working with a global investment bank in London that is looking to hire a Security Engineer – Privileged Identity into its cybersecurity team.

This is a hands-on security engineering role with an approximately 50/50 split between CyberArk/PAM and broader security engineering projects.

You’ll need practical CyberArk experience, but this isn’t a pure CyberArk support role. Alongside PAM, you’ll get exposure to wider security engineering projects across identity, automation, secrets management, cloud and preventative security controls.

You’ll need hands-on experience with CyberArk and Privileged Access Management, with knowledge across areas such as:

• CyberArk PAM administration and engineering
• Privileged and service account management
• Safes, RBAC, platforms and policies
• Credential rotation and secrets management
• Application and third-party integrations
• Automation of PAM processes

For the other side of the role, we’re looking for broader security engineering capability or an appetite to develop further across:

• Security tooling implementation and integration
• Identity security and least privilege
• Automation using PowerShell and/or Python
• Secrets and certificate management
• Windows Server and Active Directory
• Linux and enterprise networking
• Cloud security across Azure, AWS or similar environments
• Testing and implementing new preventative security controls

You don’t need to be an expert across every area. The key is having a solid grounding in CyberArk/PAM alongside broader technical skills and an interest in developing further as a security engineer.

Strong communication, reporting and documentation skills are also important.

Salary: £50,000–£60,000 base

Location: London – 2 days onsite per week

Please note: sponsorship is not available for this position. You must already have the right to work in the UK.