WNTD

We are supporting a major CyberArk SaaS Privileged Access Management (PAM) transformation programme for one of the world's leading financial markets organisations. As part of a large-scale cloud security initiative, we are looking for experienced CyberArk SCA/SIA Engineers with recent, hands-on experience implementing CyberArk SaaS technologies across Azure and AWS environments. This is a fantastic opportunity to work on a next-generation CyberArk Identity Security Platform deployment, delivering modern privileged access capabilities across a complex enterprise cloud estate. Key Responsibilities Build and support CyberArk Secure Cloud Access (SCA) for Azure and AWS Implement Secure Infrastructure Access (SIA) for Windows and Linux platforms Configure Just-in-Time (JIT) and Zero Standing Privilege (ZSP) access models Implement privileged access policies, credential vaulting and session management Configure CyberArk Identity and approval workflows Support Privilege Cloud onboarding, credential management and Secrets Rotation Service (SRS) Configure Secure Web Sessions (SWS) for browser-based privileged access Integrate CyberArk with Microsoft Entra ID, ServiceNow and enterprise identity platforms Develop automation using Terraform, APIs and CI/CD pipelines where appropriate Produce design documentation, onboarding standards, runbooks and operational procedures Work closely with Cloud, Security and Infrastructure teams to deliver production-ready PAM services Essential Skills Recent, hands-on experience implementing CyberArk Secure Cloud Access (SCA) Recent, hands-on experience implementing CyberArk Secure Infrastructure Access (SIA) Strong experience with CyberArk SaaS/Privilege Cloud Experience configuring privileged access across Azure and/or AWS Knowledge of Just-in-Time (JIT), Zero Standing Privilege (ZSP) and least privilege access models Experience with RDP, SSH and privileged infrastructure access Experience integrating CyberArk with Entra ID and ServiceNow Experience with approval workflows and privileged access governance Strong understanding of credential life cycle management and password rotation Highly Desirable Experience with Secure Web Sessions (SWS) Experience with Secrets Rotation Service (SRS) Experience with CyberArk Identity and Identity Flows Terraform and API-driven automation DevSecOps and CI/CD integration Kubernetes privileged access Experience within banking, financial services or other highly regulated environments Certifications CyberArk certifications such as Defender, Sentry or Guardian are highly desirable. Additional Information Inside IR35 Contract until the end of the year with strong potential for extension Immediate start Remote, hybrid and onsite working options available (London preferred) Working on one of the UK's largest CyberArk SaaS transformation programmes Excellent day rate available. We are prepared to pay a premium for candidates who can demonstrate recent, hands-on production experience implementing CyberArk SCA/SIA and the associated CyberArk SaaS technologies. If you have genuine, production-level experience implementing CyberArk SCA/SIA technologies and are looking to work on a high-profile enterprise security programme, please get in touch.

3rd Line Analyst (Wintel/AD Specialist) Location: Remote with occasional visits to Derby Contract: 12-month FTC Clearance: Current SC clearance (or above) required - no dual nationality Day Rate: up to £500 - £550 Role Purpose We are seeking an experienced 3rd Line Analyst to join our team, specialising in Wintel and Active Directory environments . You will be responsible for resolving complex technical incidents, supporting a large-scale hybrid infrastructure, and ensuring service excellence across authentication, authorisation, and access services. This role combines business-as-usual support with the opportunity to contribute to solution design and implementation. Key Responsibilities Technical (80%) Respond to incidents and service calls, ensuring SLA targets are consistently met. Deliver higher First Time Fix rates and resolve escalated technical issues. Monitor call queues, liaise with specialist teams, and drive timely resolution. Provide operational support for Microsoft Windows Server, Active Directory, Entra ID, VMware/Hyper-V, and Azure. Manage identity services including Authentication, Federation, and Access Control. Support Windows networking services (DNS, DHCP) and anti-virus solutions. Troubleshoot hybrid infrastructure environments. Create and maintain accurate operational documentation. Administration (20%) Maintain incident records and reporting in ITSM systems. Contribute to SLA reporting and performance metrics. Participate in team/sector meetings and knowledge sharing sessions. Ensure compliance with customer and security policies. Required Skills & Experience 5+ years' experience supporting large hybrid IT environments. 3+ years working with Microsoft Windows Server (all current versions), Active Directory, Entra ID, VMware/Hyper-V. Current SC clearance (or higher) . Strong understanding of ITIL Service Operations (Incident, Request, Problem, Change). Proficiency in PowerShell for automation and reporting. Relevant technical certifications (Microsoft, VMware, Azure). Excellent communication, documentation, and stakeholder management skills. Ability to work under pressure and manage multiple priorities effectively. Desired Skills (Advantageous) In-depth 3rd Line Support experience resolving complex incidents. Modern device management (Intune, Workspace One). Azure PIM & Identity Governance. Microsoft Certifications (eg, AZ-800/801, SC-300). Strong Active Directory deployment, configuration, and troubleshooting experience. Knowledge of enterprise app deployment and conditional access policies. Familiarity with converged technologies (Simplivity, UCS). Personal Attributes Strong analytical and problem-solving skills. Organised, systematic, and detail-oriented. Effective interpersonal skills, with the ability to influence at all levels. Self-driven, adaptable, and collaborative in approach.

Job Opportunity: Azure DevOps Support & Training Specialist Location: Derby (5 days per week, on-site) Clearance: Must hold valid SC clearance Nationality Requirement: British nationals only (no dual nationality permitted) About the Role We are seeking an Azure DevOps Support & Training Specialist to join our clients team in Derby. This role is critical in supporting, maintaining, and enabling the use of Azure DevOps across the organisation, while ensuring operational excellence and knowledge sharing. This is a secure site role , requiring valid SC clearance and strict eligibility criteria. Key Responsibilities Setup & Training: Creation of Azure DevOps Knowledge Base articles on ServiceNow. Delivery of high-level base training and enablement for Azure DevOps concepts. Support & BAU Activities: Provision of Azure DevOps support services, including updates, patching, and security fixes. Operational support for Azure DevOps usage (configuring pipelines, resolving tickets, addressing queries). Discovery and documentation of the existing environment and configuration. Knowledge & Process Improvement: Issue logging and knowledge article creation. Quarterly ticket volume analysis to drive continuous improvement. Requirements Valid SC clearance (mandatory). British nationality only (no dual nationals permitted). Proven experience in Azure DevOps support, configuration, and training. Strong documentation and knowledge management skills. Familiarity with ServiceNow for knowledge base creation.