CyberArk Engineer

CyberArk Engineer - Utrecht - Salary up to €85,000 all in As a CyberArk Engineer, you’ll play a key role in one of the most critical security platforms within a large financial organisation. You help ensure the CyberArk platform remains secure, reliable and future-proof, safeguarding privileged accounts and high-value access rights. Within the Identity & Access Management domain, you’ll work at the heart of the Privileged Access Management service where CyberArk expertise, platform engineering, automation and security hardening come together. What you’ll do - Improve monitoring, logging and auditing across the PAM platform. - Automate administrative processes using PowerShell and other tools. - Implement and configure new CyberArk platform capabilities. - Perform platform upgrades, patching and lifecycle management. - Investigate and resolve complex security and authentication issues. - Support security audits and compliance activities. - Harden CyberArk components and the underlying infrastructure. - Enhance platform availability, performance and reliability. - Develop automation for administrative and operational processes. - Monitor availability, performance, capacity and security events. - Manage, secure and optimise the CyberArk Digital Vault, Central Policy Manager and Privileged Session Manager. - Advise on PAM risks, security controls and mitigating measures. - Contribute to Identity Security, Zero Trust and platform hardening. - Maintain technical documentation, runbooks and platform standards. Where you’ll work You’ll join a large, internationally operating financial organisation that places strong emphasis on cybersecurity and digital innovation. Identity & Access Management is a core capability, key to safeguarding digital identities and access rights. You’ll become part of a specialised team of security engineers within the IAM domain. Together, you work on further developing the CyberArk platform. The team operates in a hybrid setup, typically spending one to two days per week in the office, and values collaboration, knowledge-sharing and a culture focused on continuous improvement and technical excellence. What you bring - Bachelor’s degree or equivalent working and thinking level. - Experience with Windows Server infrastructure. - Hands-on experience with PowerShell, scripting and automation via Ansible and pipelines. - Background knowledge of CyberArk (willing to get certified). - Understanding of Privileged Access Management and Identity Security. - Knowledge of Active Directory and authentication mechanisms such as Kerberos and LDAP. - Strong analytical and troubleshooting skills. - Excellent written and spoken English. - Experience with Infrastructure as Code and CI/CD principles. Preferred qualifications - CyberArk Defender, Sentry or Guardian certification. - Experience with PAM governance, auditing and compliance. - Knowledge of Zero Trust principles and security monitoring. - Experience within a highly regulated environment such as financial services. - Experience coaching colleagues and sharing technical knowledge. What you’ll get - An all-in annual salary of up to €85,000 based on 36 hours per week. - A hybrid work setup (1–2 days per week in the office). - A professional environment where cybersecurity, innovation and teamwork are central.