Security Architect

TEKsystems; Hong Kong; On-site; HKD 900,000 - 1,300,000; Full time

Job summary

TEKsystems is seeking an IAM Architect to lead the design, implementation, governance, and ongoing improvement of a Privileged Access Management platform focused on CyberArk technologies. The role covers secure management of privileged accounts, credentials, and secrets across on-premise and cloud environments.

You will own CyberArk architecture (Vault, CPM, PSM, PVWA, Conjur), enforce least privilege controls, and provide L3 support while driving automation via PowerShell, Python, and CyberArk

Qualifications

• Experience designing and implementing PAM platforms.
• Knowledge of least privilege and separation of duties principles.
• Ability to lead architecture decisions for privileged access controls.

Responsibilities

• Own and maintain the CyberArk architecture, including Vault, CPM, PSM, PVWA, and Conjur.
• Design and enforce privileged access controls based on least privilege, segregation of duties, and time-bound access.
• Provide architectural leadership and L3 support for CyberArk and PAM services.
• Ensure platform resilience through monitoring, incident response, and disaster recovery processes.
• Lead secrets management initiatives, including password rotation, SSH key management, and API credential vaulting.
• Automate PAM processes using PowerShell, Python, and CyberArk REST APIs.
• Integrate privileged access controls into cloud environments, applications, and CI/CD pipelines.
• Collaborate with infrastructure, cloud, DevSecOps, and application teams to embed secure identity controls.
• Evaluate and recommend new PAM and privileged access technologies to enhance security capabilities.

Skills

CyberArk

PAM

Privileged access management

PowerShell

Python

Tools

CyberArk REST APIs

PowerShell

Python

Job description

• Design and hands on implementation responsibilities


• APAC wide role at Global FS firm


• Variety of different project exposure


• Design and hands on implementation responsibilities

My banking client are looking for an IAM Architect to be responsible for the design, implementation, governance, and continuous improvement of the Privileged Access Management (PAM) platform, with a focus on CyberArk technologies. The role ensures secure management of privileged accounts, credentials, and secrets across enterprise infrastructure, cloud platforms, and applications.

Key Responsibilities

• Own and maintain the CyberArk architecture, including Vault, CPM, PSM, PVWA, and Conjur.


• Design and enforce privileged access controls based on least privilege, segregation of duties, and time-bound access.


• Provide architectural leadership and L3 support for CyberArk and PAM services.


• Ensure platform resilience through monitoring, incident response, and disaster recovery processes.


• Lead secrets management initiatives, including password rotation, SSH key management, and API credential vaulting.


• Automate PAM processes using PowerShell, Python, and CyberArk REST APIs.


• Integrate privileged access controls into cloud environments, applications, and CI/CD pipelines.


• Collaborate with infrastructure, cloud, DevSecOps, and application teams to embed secure identity controls.


• Evaluate and recommend new PAM and privileged access technologies to enhance security capabilities.