Cybersecurity Architect (CyberArk Core / Powershell / Python Rest API)

MALTEM ASIA PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Maltem Singapore is seeking a Cybersecurity Architect specialized in CyberArk to join our i-Banking Client's security team. The role demands hands-on implementation, integration, and operation of CyberArk PAS in enterprise environments.

The ideal candidate will bring deep expertise in CyberArk Core PAS, Conjur, and related identity/privilege technologies, with strong scripting skills and experience in cloud-integrated security.

Qualifications

• 8+ years of experience as security professional.
• Bachelor's degree in Computer Science, Information Security, or related field (Master's preferred).
• Hands-on experience architecting, deploying, and operating CyberArk PAS at enterprise scale.
• Conjur (CyberArk) policy-as-code, secret rotation, dynamic secrets, Kubernetes side-car injection.

Skills

CyberArk PAS

Conjur

PowerShell

Python

CyberArk Privileged Threat Analytics

SSO / IdP (SAML, OIDC)

Kubernetes integration

Zero-Trust concepts

Windows/UNIX/Linux auth

REST API automation

Education

Bachelor's degree in Computer Science / Information Security

Master's degree (preferred)

Tools

CyberArk REST API

AWS Secrets Manager

Azure Key Vault

Kerberos / LDAP tooling

Job description

Maltem Singapore is currently seeking a Cybersecurity Architect - CyberArk for an i-BankingClient.

Technical:

• 8+ years of experience as security professional
• Bachelor's degree in Computer Science, Information Security, or related field (Master's preferred).
• Hands-on experience architecting, deploying, and operating CyberArk PAS (Vault, CPM, PSM, PVWA) at enterprise scale.
• Conjur (CyberArk) - L3 - policy-as-code (CPL/HCL), secret rotation, dynamic secrets, Kubernetes side-car injection, API/CLI integrations
• Deep expertise in CyberArk Core PAS components and CyberArk Privileged Threat Analytics.
• Strong knowledge of Windows/UNIX/Linux authentication mechanisms, Kerberos, LDAP/AD, SSH, database authentication.
• Experience integrating CyberArk with SSO/IdP solutions (SAML, OIDC, AD).
• Proficiency in PowerShell, Python, and CyberArk REST API for automation.
• Familiarity with cloud providers (AWS Secrets Manager, Azure Key Vault) and Hybrid-IAM environments.
• Solid understanding of Zero-Trust concepts for privileged access.

Behavioral:

• Excellent interpersonal and communication skills; ability to influence and motivate
• Leverage PAM analytics (session recordings, anomaly scores) to drive risk-based decisions
• Ability to handle high pressure situations with key stakeholders to collaborate and communicate effectively and respectfully with both business-oriented executives and technology-oriented personnel in teams across the organization

Specific Qualifications:

• CyberArk Certified Defender (CCD)
• Secrets Manager (Conjur) certified