Cybersecurity Architect - CyberArk

ALLEGIS GROUP SINGAPORE PRIVATE LIMITED; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

ALLEGIS GROUP SINGAPORE PRIVATE LIMITED is seeking an experienced CyberArk Architect to lead design, implementation and continuous improvement of vault and PAM solutions across APAC operations.

You will secure, monitor, and govern privileged credentials, drive policy with Conjur, integrate with CI/CD, and collaborate with DevSecOps to embed identity controls across enterprise systems.

Qualifications

• Expert knowledge of CyberArk Vault, PSM, CPM and PAM solutions
• L3-level expertise in Conjur including policy-as-code, secret lifecycle automation, and Kubernetes integration
• Proven experience building highly available and resilient identity platforms with monitoring, automated remediation, and disaster recovery procedures
• Hands-on experience architecting, deploying, and operating CyberArk PAS at enterprise scale
• Strong communication and stakeholder management skills

Responsibilities

• Define and own enterprise-wide CyberArk architecture (Vault, CPM, PSM, PVWA, Conjur)
• Design and enforce privileged-access policies across Windows, Linux, UNIX, databases, and cloud platforms
• Provide high-availability support for CyberArk services, including monitoring, incident response, and disaster recovery
• Drive secret-management lifecycle including password rotation, SSH key management, API credential vaulting, and on-demand retrieval
• Partner with engineering, application, and cloud teams to embed secure identity controls
• Automate PAM processes using PowerShell, Python, and CyberArk REST APIs
• Evaluate emerging PAM technologies and develop adoption business cases
• Collaborate with DevSecOps, Cloud, and Application teams to integrate privileged-access controls into CI/CD pipelines and cloud-native workloads

Skills

CyberArk Vault/PSM/CPM

Conjur

Identity platforms

PowerShell

Python

AWS Secrets Manager

Azure Key Vault

Kubernetes integration

SSO/IdP integrations

Education

Bachelor's degree in Computer Science or Information Security

Master's degree preferred

Tools

CyberArk PAS

Job description

Position Purpose

• Lead thedesign, implementation, and continuous improvement of CyberArk vault and associated PAM solutions across APAC operations.Accountable for securing, monitoring, and governing privileged credentials and sessions to reduce credential theft, insider abuse, and lateral movement risks.

Candidate Success Factors

• Expert knowledge ofCyberArk (Vault, PSM, CPM) and PAM solutions.
• DemonstratedL3-level expertise in Conjurincluding policy-as-code, secret lifecycle automation, and Kubernetes integration.
• Proven experience building highly available and resilient identity platforms with monitoring, automated remediation, and disaster recovery procedures.
• Client, customer and stakeholder focus.
• Strong compliance culture and conduct.

Responsibilities

• Define and own enterprise-wide CyberArk architecture (Vault, CPM, PSM, PVWA, Conjur).
• Design and enforce privileged-access policies across Windows, Linux, UNIX, databases, and cloud platforms.
• Provide high-availability support for CyberArk services, including monitoring, incident response, and disaster recovery.
• Drive secret-management lifecycle including password rotation, SSH key management, API credential vaulting, and on-demand retrieval.
• Partner with engineering, application, and cloud teams to embed secure identity controls.
• Automate PAM processes using PowerShell, Python, and CyberArk REST APIs.
• Evaluate emerging PAM technologies and develop adoption business cases.
• Collaborate with DevSecOps, Cloud, and Application teams to integrate privileged-access controls into CI/CD pipelines and cloud-native workloads.

Technical & Behavioral Competencies

• 8+ years of cybersecurity experience.
• Bachelor’s degree in computer science, Information Security, or related field; Master’s preferred.
• Hands-on experience architecting, deploying, and operatingCyberArk PAS at enterprise scale.
• Conjurexpertise includingpolicy-as-code, secret rotation, dynamic secrets, Kubernetes integration, and API/CLI integrations.
• Strong knowledge of Windows, UNIX, Linux authentication, Kerberos, LDAP/AD, SSH, and database authentication.
• Experience integrating CyberArk with SSO/IdP solutions using SAML, OIDC, and Active Directory.
• Proficiency in PowerShell, Python, and CyberArk REST APIs.
• Familiarity with AWS Secrets Manager, Azure Key Vault, and hybrid IAM environments.
• Understanding of Zero Trust privileged access concepts.
• Excellent communication and stakeholder management skills.

Specific Qualifications

• CyberArk Certified Defender (CCD).
• CyberArk Secrets Manager (Conjur) certification.

We regret to inform that only shortlisted candidates will be notified.