We're looking for an experienced Cybersecurity Architect (CyberArk) to join a leading global financial institution supporting its APAC Identity & Access Management (IAM) Production team. This is an exciting opportunity to design and enhance enterprise-scale Privileged Access Management (PAM) solutions across a complex, highly secure banking environment.
What You'll Do
- Lead the architecture, implementation, and enhancement of CyberArk Privileged Access Management (PAM) solutions.
- Design and maintain CyberArk components including Vault, CPM, PSM, PVWA, and Conjur.
- Develop and enforce privileged access policies based on least privilege and Zero Trust principles.
- Drive password rotation, secret management, privileged session monitoring, and credential governance.
- Automate PAM processes using PowerShell, Python, and CyberArk REST APIs.
- Partner with Infrastructure, Cloud, DevSecOps, and Application teams to integrate privileged access controls into enterprise platforms and CI/CD pipelines.
- Ensure high availability, resilience, monitoring, and disaster recovery for CyberArk services.
- Evaluate and introduce new CyberArk capabilities and industry best practices.
What We're Looking For
- 8+ years of experience in Cybersecurity, Identity & Access Management, or Privileged Access Management.
- Strong hands-on experience with CyberArk PAS, including Vault, CPM, PSM, and PVWA.
- Experience designing and implementing enterprise CyberArk architectures.
- Hands-on experience with CyberArk Conjur, including secret management, policy-as-code, and Kubernetes integration.
- Experience with Windows, Linux/Unix, Active Directory, LDAP, Kerberos, and SSH authentication.
- Proficiency in PowerShell and/or Python scripting for automation.
- Experience integrating CyberArk with cloud platforms such as AWS and Azure.
- Strong understanding of Zero Trust security principles and privileged identity management.
- Excellent communication and stakeholder management skills.
Nice to Have
- CyberArk Certified Defender (CCD)
- CyberArk Conjur / Secrets Manager certification
- Experience within Banking or Financial Services
- Knowledge of Kubernetes, DevSecOps, and cloud-native security
