Cybersecurity Architect (Cyberark)
HybridSingapore, Singapore
Job Summary
Design and own the enterprise-wide CyberArk architecture to support banking clients' technical accounts inventory. Enforce privileged-access policies across Windows, Linux, UNIX, databases, and cloud platforms while driving the secret-management lifecycle including automatic password rotation and SSH key management. Provide high-availability support for CyberArk services by establishing robust monitoring, incident-response, and disaster-recovery processes that keep critical systems running 24×7. Partner with engineering, application, and cloud teams to embed secure identity controls into new service launches and CI/CD pipelines, automating PAM processes using PowerShell, Python, and CyberArk REST APIs. Evaluate emerging PAM technologies to build business cases for adoption and leverage analytics to drive risk-based decisions.
Required Qualifications
- Minimum of 8+ years of experience as security professional
- Bachelor's degree in Computer Science, Information Security, or related field (Master's)
- Hands-on experience architecting, deploying, and operating CyberArk PAS (Vault, CPM, PSM, PVWA) at enterprise scale
- Conjur (CyberArk) – L3 – policy-as-code (CPL/HCL), secret rotation, dynamic secrets, Kubernetes side-car injection, API/CLI integrations
- Deep expertise in CyberArk Core PAS components and CyberArk Privileged Threat Analytics
- Strong knowledge of Windows/UNIX/Linux authentication mechanisms, Kerberos, LDAP/AD, SSH, database authentication
- Experience integrating CyberArk with SSO/IdP solutions (SAML, OIDC, AD)
- Proficiency in PowerShell, Python, and CyberArk REST API for automation
- Familiarity with cloud providers (AWS Secrets Manager, Azure Key Vault) and Hybrid-IAM environments
- Solid understanding of Zero-Trust concepts for privileged access
- Excellent interpersonal and communication skills; ability to influence and motivate
- Ability to handle high pressure situations with key stakeholders to collaborate and communicate effectively and respectfully with both business-oriented executives and technology-oriented personnel in teams across the organization
- CyberArk Certified Defender (CCD)
- Secrets Manager (Conjur) certified
Desired Qualifications
- Proven track record of building high-availability, resilient identity platforms with robust monitoring, automated remediation, and documented DR procedures
- Client, Customer and Stakeholder Focus, Compliance Culture and Conduct
- Leverage PAM analytics (session recordings, anomaly scores) to drive risk-based decisions
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.