Cybersecurity Architect (CyberArk Core / Powershell / Python Rest API)

Maltem Asia Pte. Ltd.; Santo Niño 1st; On-site; PHP 8,806,000 - 11,742,000; Full time

Job summary

Maltem Singapore is seeking a Cybersecurity Architect - CyberArk for an i-BankingClient. The role requires deep expertise in CyberArk Core PAS, Conjur, and related PAM technologies, with hands-on implementation across enterprise environments.

The ideal candidate will design secure access, enable policy-as-code, automate via PowerShell and Python, and ensure seamless integration with SSO providers and cloud IAM services.

Qualifications

• 8+ years of experience in security architecture or engineering.
• Bachelor’s degree in Computer Science, Information Security, or related field; Master’s preferred.

Responsibilities

• Architect, deploy, and operate CyberArk PAS at enterprise scale.
• Integrate CyberArk with SSO/IdP solutions (SAML, OIDC, AD).
• Automate security workflows using PowerShell, Python, and CyberArk REST APIs.

Skills

CyberArk

PAM

Conjur

PowerShell

Python

REST API

Zero-Trust

SSO/IdP

Kubernetes

Cloud security

Education

Bachelor's degree in Computer Science / Information Security

Master's degree (preferred)

Tools

CyberArk PAS

Conjur

Kubernetes

LDAP/AD

SAML/OIDC

Job description

Maltem Singapore is currently seeking a Cybersecurity Architect - CyberArk for an i-BankingClient.

Technical:

• 8+ years of experience as security professional
• Bachelor's degree in Computer Science, Information Security, or related field (Master's preferred).
• Hands-on experience architecting, deploying, and operating CyberArk PAS (Vault, CPM, PSM, PVWA) at enterprise scale.
• Conjur (CyberArk) - L3 - policy-as-code (CPL/HCL), secret rotation, dynamic secrets, Kubernetes side-car injection, API/CLI integrations
• Deep expertise in CyberArk Core PAS components and CyberArk Privileged Threat Analytics.
• Strong knowledge of Windows/UNIX/Linux authentication mechanisms, Kerberos, LDAP/AD, SSH, database authentication.
• Experience integrating CyberArk with SSO/IdP solutions (SAML, OIDC, AD).
• Proficiency in PowerShell, Python, and CyberArk REST API for automation.
• Familiarity with cloud providers (AWS Secrets Manager, Azure Key Vault) and Hybrid-IAM environments.
• Solid understanding of Zero-Trust concepts for privileged access.

Behavioral:

• Excellent interpersonal and communication skills; ability to influence and motivate
• Leverage PAM analytics (session recordings, anomaly scores) to drive risk-based decisions
• Ability to handle high pressure situations with key stakeholders to collaborate and communicate effectively and respectfully with both business-oriented executives and technology-oriented personnel in teams across the organization

Specific Qualifications:

• CyberArk Certified Defender (CCD)
• Secrets Manager (Conjur) certified