Cybersecurity Architect

MORGAN MCKINLEY PTE. LTD.; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

Morgan McKinley Pte Ltd in Singapore seeks an experienced CyberArk PAM Architect to define and own enterprise CyberArk architecture, securing privileged access across hybrid infrastructure. The role emphasizes strong L3 CyberArk and Conjur expertise, automation, and cloud-native security practices.

Responsibilities include designing least-privilege access policies, ensuring highly available CyberArk platforms, automating secrets lifecycle, and integrating with Kubernetes and cloud environments

Qualifications

• Bachelor’s degree in CS/IT or related field.
• 8+ years in cybersecurity, up to 15 years total experience.
• Hands-on experience architecting, deploying and operating CyberArk PAS at enterprise scale.
• Expert knowledge of CyberArk Vault, CPM, PSM and PVWA.
• L3-level expertise in CyberArk Conjur, including policy-as-code and Kubernetes integration.
• Proficiency with PowerShell, Python and CyberArk REST APIs for PAM automation.

Responsibilities

• Define and own the enterprise-wide CyberArk architecture covering Vault, CPM, PSM, PVWA and Conjur.
• Design and enforce privileged-access policies based on least privilege and time-bound access.
• Architect and support highly available CyberArk platforms with monitoring, incident response, automated remediation and disaster-recovery procedures.
• Drive the secrets-management lifecycle including automated password rotation and credential vaulting.
• Automate PAM processes using PowerShell, Python and CyberArk REST APIs.
• Provide L3 expertise for CyberArk Conjur including policy-as-code and Kubernetes integration.
• Evaluate emerging PAM technologies and develop business cases for adoption.

Skills

CyberArk

Conjur

Policy-as-code

Kubernetes

PowerShell

Python

REST APIs

High-availability

Education

Bachelor’s degree in Computer Science or related field

Master’s degree preferred

Tools

CyberArk PAS

PVWA

CPM

Vault

Conjur

PAM analytics

PSM

Job description

We are seeking an experienced CyberArk PAM Architect to join our Cybersecurity team. The successful candidate will be responsible for defining and owning enterprise-wide CyberArk architecture, securing privileged access across hybrid infrastructure, and driving advanced secret-management capabilities using CyberArk PAS and Conjur. The role requires strong L3-level expertise in CyberArk, Conjur, automation, high-availability architecture, and cloud-native security.

Roles & Responsibilities:

• Define and own the enterprise-wide CyberArk architecture covering Vault, CPM, PSM, PVWA and Conjur to support the organization's technical-account inventory.
• Design and enforce privileged-access policies based on least privilege, separation of duties and time-bound access across Windows, Linux, UNIX, databases and cloud platforms.
• Architect and support highly available CyberArk platforms with robust monitoring, incident response, automated remediation and documented disaster-recovery procedures.
• Drive the complete secrets-management lifecycle, including automated password rotation, SSH key management, API credential vaulting and on-demand credential retrieval.
• Automate PAM processes using PowerShell, Python and CyberArk REST APIs, including bulk onboarding/offboarding and credential rotation.
• Provide L3 expertise for CyberArk Conjur, including policy-as-code, secret lifecycle automation, dynamic secrets and Kubernetes integration.
• Evaluate emerging PAM and secrets-management technologies such as CyberArk Conjur, Secret-Zero and Zero-Trust Privilege, and develop business cases for adoption.

Job Requirement:

• Must have a bachelor’s degree in computer science, Information Security, Information Technology or a related field; Master’s degree preferred.
• Minimum 8+ years of experience as a cybersecurity/security professional. Overall experience not more than 15 years.
• Strong hands-on experience architecting, deploying and operating CyberArk PAS at enterprise scale.
• Expert knowledge of CyberArk Vault, CPM, PSM and PVWA.
• Mandatory L3-level expertise in CyberArk Conjur, including policy-as-code, secret rotation, dynamic secrets and Kubernetes integration.
• Must Have Technical Skills: CyberArk PAM: Vault, CPM, PSM, PVWA and CyberArk Conjur: L3, policy-as-code, CPL/HCL, secret rotation, dynamic secrets, Kubernetes integration
• Strong experience with CyberArk Privileged Threat Analytics and PAM analytics.
• Proven experience designing and implementing high-availability and resilient identity/PAM platforms.
• Proficiency in PowerShell, Python and CyberArk REST APIs for PAM automation.

Good to Have:

• CyberArk Certified Defender (CCD) certification.
• CyberArk Conjur / Secrets Manager certification.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to Morgan McKinley Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available on the Morgan McKinley Singapore website. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Morgan McKinley Pte Ltd

Dinu Dinesh

EA License No: 11C5502

EAP Registration No: R22110286