CyberArk L3 Engineer - 6 Month Contract - UK Remote - Inside IR35

The CyberArk L3 Engineer will be responsible for supporting, upgrading, and enhancing an established CyberArk Privileged Access Management (PAM) environment within a complex enterprise setting. The role is critical in ensuring platform stability, resilience, and ongoing expansion of privileged account onboarding across infrastructure and application estates.

Working as the senior escalation point, the engineer will support L1/L2 teams, lead version upgrades, drive DR activities, and collaborate closely with internal stakeholders and customer teams to improve and mature the PAM capability., * CyberArk Platform Management: Administer and maintain CyberArk Core PAS components including Vault, PVWA, CPM, PSM and PSMP, ensuring platform stability and performance.

• Upgrades & Enhancements: Plan and execute CyberArk version upgrades, supporting testing, validation, and production rollout activities.
• Contribute to ongoing design improvements and platform optimisation.
• Disaster Recovery: Support and execute DR activities including failover and failback testing, backup validation, and resilience improvements.
• Account Onboarding: Lead onboarding of privileged accounts across Windows, Linux, databases, and application/service accounts, ensuring secure password and session management.
• Integration & Customisation: Support integrations with Active Directory, LDAP, SAML, MFA and Azure SSO. Customise or develop connection components and CPM plugins where required.
• Escalation Support: Act as L3 escalation point for complex issues, working closely with L1/L2 teams and internal SMEs to resolve incidents and improve operational processes.
• Documentation & Continuous Improvement: Maintain and update SOPs, improve alerting and reporting capabilities, and provide technical guidance to operational teams.

• Proven experience operating as a CyberArk L3 Engineer or SME within large enterprise environments
• Strong hands-on experience with CyberArk Core PAS (Vault, PVWA, CPM, PSM, PSMP)
• Demonstrable experience performing CyberArk version upgrades
• Experience managing DR activities including failover and failback testing
• Extensive experience onboarding Windows, Linux, database, and application/service accounts
• Strong knowledge of Active Directory, LDAP, SAML, MFA and Azure SSO integrations
• Experience working with databases such as Oracle, MSSQL, MySQL or Sybase
• Experience with CyberArk AAM integrations (desirable)
• Knowledge of API integrations and automation (desirable)
• CyberArk Defender certification (advantageous)