Cyber Security Architect (CyberArk)

Keyrus; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

Keyrus is seeking an experienced Cybersecurity Architect (CyberArk) to lead PAM architecture within a global financial institution's APAC IAM Production team. You will design, implement, and optimize CyberArk Vault, CPM, PSM, PVWA, and Conjur across a high-security banking environment.

You will drive least-privilege and Zero Trust policies, automate password rotation and secret management, and ensure high availability and disaster recovery.

Qualifications

• 8+ years in cybersecurity, IAM, or PAM.
• Hands-on CyberArk PAS (Vault, CPM, PSM, PVWA).
• Experience designing enterprise CyberArk architectures.
• Conjur secret management, policy-as-code, Kubernetes integration.

Responsibilities

• Lead architecture, implementation, and enhancement of CyberArk PAM solutions.
• Design and maintain CyberArk components (Vault, CPM, PSM, PVWA, Conjur).
• Develop and enforce privileged access policies based on least privilege and Zero Trust.
• Drive password rotation, secret management, privileged session monitoring, and credential governance.
• Automate PAM processes using PowerShell, Python, and CyberArk REST APIs.
• Partner with Infra, Cloud, DevSecOps, and App teams to integrate privileged access controls into CI/CD pipelines.
• Ensure high availability, resilience, monitoring, and DR for CyberArk services.
• Evaluate and adopt new CyberArk capabilities and industry best practices.

Skills

CyberArk PAS

CyberArk Conjur

PAM architecture

PowerShell

Python

AWS

Azure

Zero Trust

Active Directory

Kerberos

SSH

Tools

Kubernetes

Vault

Job description

We're looking for an experienced Cybersecurity Architect (CyberArk) to join a leading global financial institution supporting its APAC Identity & Access Management (IAM) Production team. This is an exciting opportunity to design and enhance enterprise-scale Privileged Access Management (PAM) solutions across a complex, highly secure banking environment.

What You'll Do

• Lead the architecture, implementation, and enhancement of CyberArk Privileged Access Management (PAM) solutions.
• Design and maintain CyberArk components including Vault, CPM, PSM, PVWA, and Conjur.
• Develop and enforce privileged access policies based on least privilege and Zero Trust principles.
• Drive password rotation, secret management, privileged session monitoring, and credential governance.
• Automate PAM processes using PowerShell, Python, and CyberArk REST APIs.
• Partner with Infrastructure, Cloud, DevSecOps, and Application teams to integrate privileged access controls into enterprise platforms and CI/CD pipelines.
• Ensure high availability, resilience, monitoring, and disaster recovery for CyberArk services.
• Evaluate and introduce new CyberArk capabilities and industry best practices.

What We're Looking For

• 8+ years of experience in Cybersecurity, Identity & Access Management, or Privileged Access Management.
• Strong hands‑on experience with CyberArk PAS, including Vault, CPM, PSM, and PVWA.
• Experience designing and implementing enterprise CyberArk architectures.
• Hands‑on experience with CyberArk Conjur, including secret management, policy‑as‑code, and Kubernetes integration.
• Experience with Windows, Linux/Unix, Active Directory, LDAP, Kerberos, and SSH authentication.
• Proficiency in PowerShell and/or Python scripting for automation.
• Experience integrating CyberArk with cloud platforms such as AWS and Azure.
• Strong understanding of Zero Trust security principles and privileged identity management.
• Excellent communication and stakeholder management skills.

Nice to Have

• CyberArk Conjur / Secrets Manager certification
• Experience within Banking or Financial Services
• Knowledge of Kubernetes, DevSecOps, and cloud-native security