Cybersecurity Architect - CyberArk

Position Purpose

• Lead the design, implementation, and continuous improvement of CyberArk vault and associated PAM solutions across APAC operations. Accountable for securing, monitoring, and governing privileged credentials and sessions to reduce credential theft, insider abuse, and lateral movement risks.

Candidate Success Factors

• Expert knowledge of CyberArk (Vault, PSM, CPM) and PAM solutions.
• Demonstrated L3-level expertise in Conjur including policy-as-code, secret lifecycle automation, and Kubernetes integration.
• Proven experience building highly available and resilient identity platforms with monitoring, automated remediation, and disaster recovery procedures.
• Client, customer and stakeholder focus.
• Strong compliance culture and conduct.

Responsibilities

• Define and own enterprise-wide CyberArk architecture (Vault, CPM, PSM, PVWA, Conjur).
• Design and enforce privileged-access policies across Windows, Linux, UNIX, databases, and cloud platforms.
• Provide high-availability support for CyberArk services, including monitoring, incident response, and disaster recovery.
• Drive secret-management lifecycle including password rotation, SSH key management, API credential vaulting, and on-demand retrieval.
• Partner with engineering, application, and cloud teams to embed secure identity controls.
• Automate PAM processes using PowerShell, Python, and CyberArk REST APIs.
• Evaluate emerging PAM technologies and develop adoption business cases.
• Collaborate with DevSecOps, Cloud, and Application teams to integrate privileged-access controls into CI/CD pipelines and cloud-native workloads.

Technical & Behavioral Competencies

• 8+ years of cybersecurity experience.
• Bachelor’s degree in computer science, Information Security, or related field; Master’s preferred.
• Hands-on experience architecting, deploying, and operating CyberArk PAS at enterprise scale.
• Conjur expertise including policy-as-code, secret rotation, dynamic secrets, Kubernetes integration, and API/CLI integrations.
• Strong knowledge of Windows, UNIX, Linux authentication, Kerberos, LDAP/AD, SSH, and database authentication.
• Experience integrating CyberArk with SSO/IdP solutions using SAML, OIDC, and Active Directory.
• Proficiency in PowerShell, Python, and CyberArk REST APIs.
• Familiarity with AWS Secrets Manager, Azure Key Vault, and hybrid IAM environments.
• Understanding of Zero Trust privileged access concepts.
• Excellent communication and stakeholder management skills.

Specific Qualifications

• CyberArk Certified Defender (CCD).
• CyberArk Secrets Manager (Conjur) certification.

We regret to inform that only shortlisted candidates will be notified.

EA registration number : NG XUAN , R24123530

Allegis Group Singapore Pte Ltd, Company Reg No. 200909448N, EA Licence No. 10C4544