Privileged Access Management (PAM) Lead (CyberArk)

Location: Bristol, United Kingdom; hybrid work with office attendance two days per week

Company

hirify.global is a UK investment platform helping private investors save and invest.

What you will do

• Provide technical leadership and subject matter expertise across Privileged Access Management services.
• Own the PAM technical roadmap and align services with security strategy and risk objectives.
• Lead the optimisation of CyberArk Privilege Cloud and Endpoint Privilege Manager implementations.
• Develop strategies for privileged accounts, service accounts, machine identities, API credentials and other non-human identities.
• Define PAM architecture standards, engineering patterns and operational procedures while handling complex escalations.
• Collaborate with infrastructure, cloud, application development, security operations and risk teams; mentor PAM engineers and analysts.

Requirements

• Extensive Privileged Access Management experience in complex enterprise environments, ideally in financial services.
• Hands-on experience administering and engineering CyberArk Privilege Cloud and CyberArk Endpoint Privilege Manager.
• Experience with secrets management for applications, cloud platforms and infrastructure services.
• Strong knowledge of Identity and Access Management, authentication, authorisation, RBAC and least privilege.
• Technical knowledge of Active Directory, Entra ID, Windows Server, Linux, cloud platforms and enterprise infrastructure.
• Experience with PowerShell or other scripting technologies, complex troubleshooting, stakeholder management and technical mentoring.

Nice to have

• CyberArk Privilege Cloud or EPM certification, such as Defender, Sentry or Certified Delivery Engineer.
• Information security certification such as CISSP, CISM or CCSP.

Culture & Benefits

• Permanent full-time employment, 37.5 hours per week, Monday to Friday.
• Hybrid working options with two office days per week.
• Annual discretionary bonus and pay review.
• 25 days of holiday plus bank holidays and an additional Christmas closure day.
• Pension contributions of up to 11%, private medical insurance, income protection and life insurance.
• Learning-focused workplace with wellbeing support, health screening and volunteering days.

Hiring process

• Two-stage process: initial interview followed by competency, technical and scenario-based questions.
• Employment sponsorship is not available.