Senior CyberArk & Active Directory Engineer (PAM SME)

Up to £100,000 + 20% Bonus + 10% Pension + Excellent Benefits
London (Hybrid/3 Days a week)

The Opportunity

We’re partnering with a global insurance organisation operating at significant scale, looking to appoint a Senior CyberArk & Active Directory Engineer to lead their Privileged Access Management (PAM) capability.

This is a critical hire within a complex enterprise domain, suited to someone who has experience working in large, globally distributed environments and understands the challenges of identity and security at scale.

You’ll act as the CyberArk Subject Matter Expert, owning design, architecture, and engineering across a broad, international technology estate.

Key Responsibilities

• Lead the design, implementation, and optimisation of CyberArk PAM solutions
• Own core CyberArk components (Vault, CPM, PSM, PTA, etc.)
• Integrate CyberArk within a global Active Directory domain and broader identity landscape (Entra ID / Azure AD)
• Implement privileged access controls across enterprise systems, including Tier 0 assets
• Secure domain admin, enterprise admin, and service accounts across large-scale environments
• Drive automation (PowerShell, APIs) to support efficiency and scalability
• Align PAM strategy with Zero Trust and enterprise security frameworks
• Collaborate with global teams across infrastructure, security, and architecture

What We’re Looking For

• 10+ years’ experience in infrastructure, identity, and security engineering
• Proven background working in enterprise-scale organisations with global reach
• Deep hands-on expertise in CyberArk (essential)
• Strong experience managing large Active Directory domains (multi-site, complex environments)
• Clear career path from infrastructure engineering into security/identity
• Strong understanding of:
  • PAM, IAM, Zero Trust
  • AD tiering, GPOs, DNS, domain security
  • Automation and scripting (PowerShell)
• Experience working in highly regulated or security-focused environments is beneficial
• Comfortable operating as a technical leader / SME in complex organisations

Why Apply?

• Work within a globally recognised enterprise environment
• Own and shape a business-critical PAM capability
• Exposure to large-scale, complex identity ecosystems
• Excellent package including:
  • Up to £100,000 base
  • 20% bonus
  • 10% pension
  • Extensive benefits package

Who This Suits

This role is ideal for someone who:

• Has worked in large, enterprise organisations with global infrastructure
• Comes from a Windows / infrastructure engineering background
• Has transitioned into security, identity, and PAM
• Wants to step into a true CyberArk SME role with enterprise-level impact