Security Engineer (CyberArk) – Wellington

About the role

As a Security Engineer in the Security Initiatives & Identity Management team, you will own the CyberArk Privileged Access Management (PAM) platform, expanding its coverage, building custom connectors and automating onboarding, reporting and ongoing management. You will work closely with engineers, analysts and product owners to deliver secure, reliable identity solutions for the bank.

Key responsibilities

• Maintain and enhance the CyberArk PAM solution, extending its coverage across the organisation.
• Develop custom connectors and integrations for CyberArk PAS, including CPM, PSM and REST/API based services.
• Create and maintain automation scripts for onboarding, reporting and platform management.
• Collaborate with cross‑functional teams to design and implement system changes, platform upgrades and new integrations.
• Support continuous delivery practices to accelerate delivery speed.
• Provide specialist advice, troubleshooting and strategic direction for CyberArk integrations.
• Engage with stakeholders to prioritise new integrations and identify improvement opportunities.
• Assist with platform maintenance tasks such as patching and disaster‑recovery testing.

Required profile

• Strong scripting and automation experience, especially with PowerShell (advanced) and Python (preferred).
• Proficiency in Bash/Shell scripting and systems‑level understanding.
• Experience designing and implementing REST/API integrations.
• Ability to work collaboratively with engineers, analysts and product owners.
• Commitment to continuous improvement and delivery efficiency.

Required skills

• CyberArk Privileged Access Management (PAS, CPM, PSM)
• PowerShell
• Python
• Bash / Shell scripting
• REST / API integration
• Automation scripting