CyberArk SME Engineer

Join MARGO in the UK (London) – Perm & Contracting Opportunities

MARGO is a tech-native consultancy delivering high value-added IT expertise to the financial services industry.

We specialise in complex software engineering environments where performance, robustness and scalability are critical: real-time systems, low-latency architectures, distributed computing and high-throughput data processing.

Joining MARGO means working in demanding Front Office and Trading IT environments, while benefiting from a human-sized structure, close follow-up and tailor-made training paths.

About the Business & Project Focus

A premier Tier 1 Investment Bank based in London, is currently undergoing a strategic, multi-year CyberArk Privileged Access Management (PAM) modernization initiative. The initiative spans three key phases:

Year 1: Deep Data Cleansing, Standardization, Naming Conventions, Permission Models, and Metadata Optimization.
Year 2: Enterprise Migration to CyberArk Cloud.
Year 3: Advanced Modernization and High-Level Automation.

Currently halfway through Year 1, the bank requires a hands-on CyberArk SME Engineer to act as the technical authority. Working alongside a dedicated PM, BA, and engineering team, you will drive ongoing metadata normalization, programmatic onboarding automation, and core architecture enhancements to prepare the enterprise for cloud migration.

Key Responsibilities

Act as the primary Subject Matter Expert (SME) for CyberArk implementation, vault structure, and platform engineering across the organization.
Design and execute script-driven onboarding automation for target servers, accounts, and applications using Python, PowerShell, REST APIs, or PACLI.
Lead automated data cleansing efforts to address inconsistent naming conventions, permission frameworks, and missing metadata across target systems.
Integrate CyberArk solutions seamlessly with Active Directory (AD), Identity Management (IDM) frameworks, and core enterprise infrastructure.
Collaborate with project managers, business analysts, and security architects to establish governance baselines and streamlined onboarding workflows.
Prepare the existing environment structurally and operationalize configurations for future CyberArk Cloud migration.

Key Qualifications & Experience Required

Track Record: 8–10+ years of dedicated, hands-on CyberArk/PAM engineering and implementation experience.
End-to-End SME Expertise: Demonstrable track record leading full-lifecycle CyberArk deployments, architectural enhancements, and component builds (Vault, CPM, PSM, EPM, CP/CCP).
Heavy Automation & Scripting: Strong, proven expertise writing custom automation scripts in PowerShell or Python utilizing CyberArk REST APIs or SDKs for bulk onboarding and metadata updates.
Identity Integrations: Deep experience handling large-scale metadata synchronization and integrations with Active Directory (AD) and IDM platforms.
Reliability: Proven history of long-term project delivery within complex corporate or financial services environments.
Note: Industry background and certifications are secondary to demonstrable technical depth in practical CyberArk implementation and API scripting.

Why Join MARGO

· Access to multi-asset Front Office, Trading and Electronic Trading environments

· Highly technical and challenging engineering assignments

· Clear positioning between HFT and non-HFT trading systems

· Strong emphasis on skill development and long-term career progression

· Human-sized consultancy with close support and high-quality missions

Please note - We do not offer visa sponsorship for this position.

Interested? Motivated? Apply on our website or at [email protected]