CyberArk Engineer

CyberArk Engineer - Utrecht - Salary up to €85,000 all in

As a CyberArk Engineer, you’ll play a key role in one of the most critical security platforms within a large financial organisation. You help ensure the CyberArk platform remains secure, reliable and future-proof, safeguarding privileged accounts and high-value access rights. Within the Identity & Access Management domain, you’ll work at the heart of the Privileged Access Management service where CyberArk expertise, platform engineering, automation and security hardening come together.

What you’ll do

• Improve monitoring, logging and auditing across the PAM platform.
• Automate administrative processes using PowerShell and other tools.
• Implement and configure new CyberArk platform capabilities.
• Perform platform upgrades, patching and lifecycle management.
• Investigate and resolve complex security and authentication issues.
• Support security audits and compliance activities.
• Harden CyberArk components and the underlying infrastructure.
• Enhance platform availability, performance and reliability.
• Develop automation for administrative and operational processes.
• Monitor availability, performance, capacity and security events.
• Manage, secure and optimise the CyberArk Digital Vault, Central Policy Manager and Privileged Session Manager.
• Advise on PAM risks, security controls and mitigating measures.
• Contribute to Identity Security, Zero Trust and platform hardening.
• Maintain technical documentation, runbooks and platform standards.

Where you’ll work

You’ll join a large, internationally operating financial organisation that places strong emphasis on cybersecurity and digital innovation. Identity & Access Management is a core capability, key to safeguarding digital identities and access rights.

You’ll become part of a specialised team of security engineers within the IAM domain. Together, you work on further developing the CyberArk platform. The team operates in a hybrid setup, typically spending one to two days per week in the office, and values collaboration, knowledge-sharing and a culture focused on continuous improvement and technical excellence.

What you bring

• Bachelor’s degree or equivalent working and thinking level.
• Experience with Windows Server infrastructure.
• Hands-on experience with PowerShell, scripting and automation via Ansible and pipelines.
• Background knowledge of CyberArk (willing to get certified).
• Understanding of Privileged Access Management and Identity Security.
• Knowledge of Active Directory and authentication mechanisms such as Kerberos and LDAP.
• Strong analytical and troubleshooting skills.
• Excellent written and spoken English.
• Experience with Infrastructure as Code and CI/CD principles.

Preferred qualifications

• CyberArk Defender, Sentry or Guardian certification.
• Experience with PAM governance, auditing and compliance.
• Knowledge of Zero Trust principles and security monitoring.
• Experience within a highly regulated environment such as financial services.
• Experience coaching colleagues and sharing technical knowledge.

What you’ll get

• An all-in annual salary of up to €85,000 based on 36 hours per week.
• A hybrid work setup (1–2 days per week in the office).
• A professional environment where cybersecurity, innovation and teamwork are central.