CyberArk PAM Architect - APAC IAM & Privileged Access

WE-PLUS PTE. LTD.; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

WE-PLUS PTE. LTD. seeks a senior APAC IAM Production-Cybersecurity Architect to lead CyberArk vault and PAM design across APAC, securing privileged credentials with robust monitoring and governance.

You will drive end-to-end secret management, policy enforcement, and enterprise resilience. The role requires hands-on expertise with CyberArk PAS and Conjur, strong scripting, and collaboration across DevSecOps, Cloud, and application teams to embed privileged access controls into cloud-native

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field.
• Minimum 8 years of experience as a security professional.
• Hands-on experience architecting, deploying, and operating CyberArk PAS at enterprise scale.
• Conjur (CyberArk) – L3 – policy-as-code, secret rotation, dynamic secrets, Kubernetes side‑car injection, API/CLI integrations.
• Deep expertise in CyberArk Core PAS components and CyberArk Privileged Threat Analytics.
• Strong knowledge of Windows/UNIX/Linux authentication mechanisms, Kerberos, LDAP/AD, SSH, database authentication.
• Experience integrating CyberArk with SSO/IdP solutions (SAML, OIDC, AD).
• Proficiency in PowerShell, Python, and CyberArk REST API for automation.
• Familiarity with cloud providers (AWS Secrets Manager, Azure Key Vault) and Hybrid‑IAM environments.
• Solid understanding of Zero‑Trust concepts for privileged access.
• Excellent interpersonal and communication skills; ability to influence and motivate.
• CyberArk Certified Defender (CCD) / Secrets Manager (Conjur) Certified.

Responsibilities

• Define and own the enterprise‑wide CyberArk architecture to support inventories.
• Design and enforce privileged‑access policies across Windows, Linux, UNIX, databases, and cloud platforms.
• Provide high‑availability support with monitoring, incident response, and DR for critical services 24×7.
• Drive secret‑management lifecycle: rotation, SSH key management, API credentials vaulting, on‑demand retrieval.
• Partner with engineering, application, and cloud teams to embed secure identity controls.
• Automate PAM processes using PowerShell, Python, and CyberArk REST APIs.
• Evaluate emerging PAM technologies and build business cases for adoption.
• Collaborate with DevSecOps, Cloud, and Application teams to embed privileged‑access controls into CI/CD pipelines.

Skills

CyberArk Vault

CyberArk CPM

CyberArk PSM

Conjur

PAM solutions

Policy-as-code

Kubernetes

Secret rotation

Zero-Trust

Automation

PowerShell

Python

REST API

SSO/IdP

AWS

Azure

GCP

CCD

Secrets Manager

Kerberos

LDAP/AD

SSH

Windows

UNIX/Linux

Education

Bachelor’s degree in CS/InfoSec

Master’s degree preferred

Tools

CyberArk PAS

Job description

WE-PLUS PTE. LTD. seeks a senior APAC IAM Production-Cybersecurity Architect to lead CyberArk vault and PAM design across APAC, securing privileged credentials with robust monitoring and governance.

You will drive end-to-end secret management, policy enforcement, and enterprise resilience. The role requires hands-on expertise with CyberArk PAS and Conjur, strong scripting, and collaboration across DevSecOps, Cloud, and application teams to embed privileged access controls into cloud-native