CyberArk PAM Architect - IAM, Secrets & Automation

TEKsystems; Hong Kong; On-site; HKD 900,000 - 1,300,000; Full time

Job summary

TEKsystems is seeking an IAM Architect to lead the design, implementation, governance, and ongoing improvement of a Privileged Access Management platform focused on CyberArk technologies. The role covers secure management of privileged accounts, credentials, and secrets across on-premise and cloud environments.

You will own CyberArk architecture (Vault, CPM, PSM, PVWA, Conjur), enforce least privilege controls, and provide L3 support while driving automation via PowerShell, Python, and CyberArk

Qualifications

• Experience designing and implementing PAM platforms.
• Knowledge of least privilege and separation of duties principles.
• Ability to lead architecture decisions for privileged access controls.

Responsibilities

• Own and maintain the CyberArk architecture, including Vault, CPM, PSM, PVWA, and Conjur.
• Design and enforce privileged access controls based on least privilege, segregation of duties, and time-bound access.
• Provide architectural leadership and L3 support for CyberArk and PAM services.
• Ensure platform resilience through monitoring, incident response, and disaster recovery processes.
• Lead secrets management initiatives, including password rotation, SSH key management, and API credential vaulting.
• Automate PAM processes using PowerShell, Python, and CyberArk REST APIs.
• Integrate privileged access controls into cloud environments, applications, and CI/CD pipelines.
• Collaborate with infrastructure, cloud, DevSecOps, and application teams to embed secure identity controls.
• Evaluate and recommend new PAM and privileged access technologies to enhance security capabilities.

Skills

CyberArk

PAM

Privileged access management

PowerShell

Python

Tools

CyberArk REST APIs

PowerShell

Python

Job description

TEKsystems is seeking an IAM Architect to lead the design, implementation, governance, and ongoing improvement of a Privileged Access Management platform focused on CyberArk technologies. The role covers secure management of privileged accounts, credentials, and secrets across on-premise and cloud environments.

You will own CyberArk architecture (Vault, CPM, PSM, PVWA, Conjur), enforce least privilege controls, and provide L3 support while driving automation via PowerShell, Python, and CyberArk