CyberArk IAM Production - Cybersecurity Architect (APAC)

Role Type and Duration: 12 Months Contract (Potential to extend)

Role Overview

We are seeking an experienced CyberArk IAM Production Architect to lead the design, implementation, and continuous improvement of CyberArk Privileged Access Management (PAM) solutions across APAC. This role is responsible for ensuring the security, availability, and governance of privileged accounts, while driving automation, resilience, and secure identity controls across enterprise and cloud environments.

Key Responsibilities

Own and manage the enterprise CyberArk architecture, including Vault, CPM, PSM, PVWA, and Conjur.
Design and implement privileged access controls, including least privilege, segregation of duties, and time-bound access.
Provide L3 production support, ensuring high availability, monitoring, incident response, and disaster recovery.
Drive the privileged credential lifecycle, including password rotation, SSH key management, and secrets management.
Collaborate with Infrastructure, DevSecOps, Cloud, and Application teams to integrate PAM controls into enterprise platforms and CI/CD pipelines.
Automate CyberArk processes using PowerShell, Python, and CyberArk REST APIs.
Evaluate and implement emerging PAM and Zero Trust technologies to strengthen security posture.

Key Requirements

8+ years of experience in Cybersecurity, Identity & Access Management, or Privileged Access Management.
Hands-on experience designing and supporting CyberArk PAS (Vault, CPM, PSM, PVWA) in enterprise environments.
Strong expertise in CyberArk Conjur, including policy-as-code, secrets management, Kubernetes integration, and API/CLI automation.
Experience with Windows, Linux/UNIX authentication, Active Directory, LDAP, Kerberos, SSH, SAML/OIDC, and cloud platforms (AWS, Azure, GCP).
Proficiency in PowerShell, Python, and CyberArk REST API automation.
Good understanding of Zero Trust security principles and privileged access governance.
Excellent stakeholder management, communication, and problem-solving skills.

Preferred Certifications

CyberArk Certified Defender (CCD)
CyberArk Secrets Manager (Conjur) Certification

Cybersecurity Architect (CyberArk IAM Production)