Cybersecurity Architect - CyberArk
Allegis Group Singapore Pte Ltd- Posted a month ago
- Be among the first 20 applicants
Job Description
Position Purpose
- Lead the design, implementation, and continuous improvement of CyberArk vault and associated PAM solutions across APAC operations. Accountable for securing, monitoring, and governing privileged credentials and sessions to reduce credential theft, insider abuse, and lateral movement risks.
Candidate Success Factors
- Expert knowledge of CyberArk (Vault, PSM, CPM) and PAM solutions.
- Demonstrated L3-level expertise in Conjur including policy-as-code, secret lifecycle automation, and Kubernetes integration.
- Proven experience building highly available and resilient identity platforms with monitoring, automated remediation, and disaster recovery procedures.
- Client, customer and stakeholder focus.
- Strong compliance culture and conduct.
Responsibilities
- Define and own enterprise-wide CyberArk architecture (Vault, CPM, PSM, PVWA, Conjur).
- Design and enforce privileged-access policies across Windows, Linux, UNIX, databases, and cloud platforms.
- Provide high-availability support for CyberArk services, including monitoring, incident response, and disaster recovery.
- Drive secret-management lifecycle including password rotation, SSH key management, API credential vaulting, and on-demand retrieval.
- Partner with engineering, application, and cloud teams to embed secure identity controls.
- Automate PAM processes using PowerShell, Python, and CyberArk REST APIs.
- Evaluate emerging PAM technologies and develop adoption business cases.
- Collaborate with DevSecOps, Cloud, and Application teams to integrate privileged-access controls into CI/CD pipelines and cloud-native workloads.
Technical & Behavioral Competencies
- 8+ years of cybersecurity experience.
- Bachelor's degree in computer science, Information Security, or related field; Master's preferred.
- Hands-on experience architecting, deploying, and operatingCyberArk PAS at enterprise scale.
- Conjur expertise including policy-as-code, secret rotation, dynamic secrets, Kubernetes integration, and API/CLI integrations.
- Strong knowledge of Windows, UNIX, Linux authentication, Kerberos, LDAP/AD, SSH, and database authentication.
- Experience integrating CyberArk with SSO/IdP solutions using SAML, OIDC, and Active Directory.
- Proficiency in PowerShell, Python, and CyberArk REST APIs.
- Familiarity with AWS Secrets Manager, Azure Key Vault, and hybrid IAM environments.
- Understanding of Zero Trust privileged access concepts.
- Excellent communication and stakeholder management skills.
Specific Qualifications
- CyberArk Certified Defender (CCD).
- CyberArk Secrets Manager (Conjur) certification.
We regret to inform that only shortlisted candidates will be notified.
EA registration number : NG XUAN , R24123530
Allegis Group Singapore Pte Ltd, Company Reg No. 200909448N, EA Licence No. 10C4544
More Info
Key Skills
About Company
Allegis Group is the global leader in talent solutions focused on working harder and caring more than any other provider. We'll go further to understand the needs of our people; our clients, our candidates, and our employees; and to consistently deliver on our promise of an unsurpassed quality experience. That's the Allegis Group difference, and it's consistent across every Allegis Group company. With more than US$11billion in annual revenues and over 500 locations across the globe, our network provides businesses with a comprehensive suite of talent solutions; without sacrificing the niche expertise required to ensure a successful partnership. Our specialised group of companies includes: Aerotek, TEKsystems, Allegis Global Solutions, Aston Carter, Major, Lindsey; Africa, Allegis Partners, MarketSource, and EASi. Visit www.AllegisGroup.com to learn more.
Allegis Group Singapore Pte Ltd,
Company Reg No. 200909448N, EA Licence No. 10C4544
