Cybersecurity Architect - CyberArk

TEKsystems (Allegis Group Singapore Pte Ltd) Singapore

Posted 3 days ago Contract Competitive

Expert knowledge of CyberArk (Vault, PSM, CPM) and PAM solutions.
Demonstrated L3-level expertise in Conjur
Define and own enterprise-wide CyberArk architecture

Position Purpose

Lead the design, implementation, and continuous improvement of CyberArk vault and associated PAM solutions across APAC operations. Accountable for securing, monitoring, and governing privileged credentials and sessions to reduce credential theft, insider abuse, and lateral movement risks.

Candidate Success Factors

Expert knowledge of CyberArk (Vault, PSM, CPM) and PAM solutions .
Demonstrated L3-level expertise in Conjur including policy-as-code, secret lifecycle automation, and Kubernetes integration.
Proven experience building highly available and resilient identity platforms with monitoring, automated remediation, and disaster recovery procedures.
Client, customer and stakeholder focus.
Strong compliance culture and conduct.

Responsibilities

Define and own enterprise-wide CyberArk architecture (Vault, CPM, PSM, PVWA, Conjur).
Design and enforce privileged-access policies across Windows, Linux, UNIX, databases, and cloud platforms.
Provide high-availability support for CyberArk services, including monitoring, incident response, and disaster recovery.
Drive secret-management lifecycle including password rotation, SSH key management, API credential vaulting, and on-demand retrieval.
Partner with engineering, application, and cloud teams to embed secure identity controls.
Automate PAM processes using PowerShell, Python, and CyberArk REST APIs.
Evaluate emerging PAM technologies and develop adoption business cases.
Collaborate with DevSecOps, Cloud, and Application teams to integrate privileged-access controls into CI/CD pipelines and cloud-native workloads.

Technical & Behavioral Competencies

8+ years of cybersecurity experience.
Bachelor's degree in computer science, Information Security, or related field; Master's preferred.
Hands-on experience architecting, deploying, and operating CyberArk PAS at enterprise scale .
Conjur expertise including policy-as-code, secret rotation, dynamic secrets, Kubernetes integration, and API/CLI integrations.
Strong knowledge of Windows, UNIX, Linux authentication, Kerberos, LDAP/AD, SSH, and database authentication.
Experience integrating CyberArk with SSO/IdP solutions using SAML, OIDC, and Active Directory.
Proficiency in PowerShell, Python, and CyberArk REST APIs.
Familiarity with AWS Secrets Manager, Azure Key Vault, and hybrid IAM environments.
Understanding of Zero Trust privileged access concepts.
Excellent communication and stakeholder management skills.

Specific Qualifications

CyberArk Certified Defender (CCD).
CyberArk Secrets Manager (Conjur) certification.

We regret to inform that only shortlisted candidates will be notified.
EA registration number : NG XUAN , R24123530 Allegis Group Singapore Pte Ltd, Company Reg No. 200909448N, EA Licence No. 10C4544

Job ID a4VQ80000052BFpMAM

ABOUT COMPANY

TEKsystems (Allegis Group Singapore Pte Ltd)

Singapore

HR & Recruitment

We’re partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a committed team working with over 6,000 clients across North America, Europe and Asia Pacific.

As an industry leader in talent services, we work with progressive leaders to drive change. That’s the power of true partnership.

TEKsystems is an Allegis Group company.

More Jobs From TEKsystems (Allegis Group Singapore Pte Ltd)