CyberArk Engineer Secret Management

CyberArk Secret Manager Engineer | Freelance | London /Paris / Brussels / Hybrid (8 days/month onsite) Duration: 12 months Rate: Flexible Inside of IR35

We're looking for an experienced CyberArk Engineer to join Euroclear's Chief Information Security Office (CISO) within the Identity and Access Management (IDAM) team. This is a fantastic opportunity to play a key role in strengthening Euroclear's Privileged Access Management (PAM) posture by deploying and integrating CyberArk Secret Manager across a complex enterprise environment. You'll lead the end-to-end implementation of CyberArk's Application Access Manager (AAM) capabilities - including Credential Provider (CP), Central Credential Provider (CCP), and Application Service Credential Provider (ASCP). Your focus will be on enabling secure, automated, and compliant management of service and functional accounts across Windows and Linux systems.

Key Responsibilities:

• Deploy, configure, and integrate CyberArk Secret Manager / AAM components (CP, CCP, ASCP).
• Design credential management solutions for service accounts, ensuring high availability and compliance.
• Integrate CyberArk with applications, middleware, and databases for secure credential retrieval and rotation.
• Automate deployments and configuration using Ansible, PowerShell, Bash, and REST APIs.
• Manage Safes, platforms, permissions, and onboarding in CyberArk PAM.
• Produce design documentation, runbooks, and integration guides.
• Collaborate with application and infrastructure teams to troubleshoot issues and optimise integrations.

What We're Looking For:

• Proven hands-on experience with CyberArk Secret Manager / AAM (non-negotiable).
• Strong PAM administration skills - Safes, platforms, permissions.
• Windows & Linux integration experience.
• Automation experience with Ansible, scripting (PowerShell, Bash), and APIs.
• Independent, proactive, and solutions-oriented mindset.