CyberArk PAM Architect — Zero Trust & IAM Automation

Keyrus; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

Keyrus is seeking an experienced Cybersecurity Architect (CyberArk) to lead PAM architecture within a global financial institution's APAC IAM Production team. You will design, implement, and optimize CyberArk Vault, CPM, PSM, PVWA, and Conjur across a high-security banking environment.

You will drive least-privilege and Zero Trust policies, automate password rotation and secret management, and ensure high availability and disaster recovery.

Qualifications

• 8+ years in cybersecurity, IAM, or PAM.
• Hands-on CyberArk PAS (Vault, CPM, PSM, PVWA).
• Experience designing enterprise CyberArk architectures.
• Conjur secret management, policy-as-code, Kubernetes integration.

Responsibilities

• Lead architecture, implementation, and enhancement of CyberArk PAM solutions.
• Design and maintain CyberArk components (Vault, CPM, PSM, PVWA, Conjur).
• Develop and enforce privileged access policies based on least privilege and Zero Trust.
• Drive password rotation, secret management, privileged session monitoring, and credential governance.
• Automate PAM processes using PowerShell, Python, and CyberArk REST APIs.
• Partner with Infra, Cloud, DevSecOps, and App teams to integrate privileged access controls into CI/CD pipelines.
• Ensure high availability, resilience, monitoring, and DR for CyberArk services.
• Evaluate and adopt new CyberArk capabilities and industry best practices.

Skills

CyberArk PAS

CyberArk Conjur

PAM architecture

PowerShell

Python

AWS

Azure

Zero Trust

Active Directory

Kerberos

SSH

Tools

Kubernetes

Vault

Job description

Keyrus is seeking an experienced Cybersecurity Architect (CyberArk) to lead PAM architecture within a global financial institution's APAC IAM Production team. You will design, implement, and optimize CyberArk Vault, CPM, PSM, PVWA, and Conjur across a high-security banking environment.

You will drive least-privilege and Zero Trust policies, automate password rotation and secret management, and ensure high availability and disaster recovery.