PAM & Identity Security Engineer

Fujitsu Careers; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Fujitsu is seeking a Security Engineer to lead end-to-end PAM, machine identity management, and 2FA deployments across enterprise environments in Singapore. You will implement CyberArk components, Venafi TLS Protect, and MFA solutions, while ensuring secure, scalable and compliant access controls.

You will collaborate with architects, project managers, and stakeholders to design, validate, and operationalize privileged access across on-prem and cloud environments, and drive migrations,

Qualifications

• Strong hands-on deployment experience with CyberArk components (EPV/CPM/PSM/PVWA/PTA) and MFA solutions.
• Experience integrating Venafi TLS Protect and machine identity management.
• Familiarity with enterprise IAM, PAM, and zero-trust security principles.

Responsibilities

• Lead CyberArk deployment and implementation across environments.
• Install, configure, and harden CyberArk components and MFA integrations.
• Perform migrations and upgrades of CyberArk environments (on-prem to on-prem/cloud/SaaS).
• Onboard privileged accounts, systems and apps; configure password policies and RBAC.
• Integrate CyberArk with SIEM, ITSM, IAM and security tools; enable audit logging.
• Develop and document runbooks, SOPs, and operational procedures.
• Provide L2/L3 support for PAM, Venafi and MFA platforms.
• Coordinate with architects, PMs and stakeholders for secure, scalable solutions.
• Support post-migration stabilization and user acceptance testing.

Skills

CyberArk deployment

CPM

PSM

PVWA

PTA

MFA integration

RSA/SecurEnvoy

Active Directory/LDAP

Scripting

Zero Trust

Job description

Fujitsu is seeking a Security Engineer to lead end-to-end PAM, machine identity management, and 2FA deployments across enterprise environments in Singapore. You will implement CyberArk components, Venafi TLS Protect, and MFA solutions, while ensuring secure, scalable and compliant access controls.

You will collaborate with architects, project managers, and stakeholders to design, validate, and operationalize privileged access across on-prem and cloud environments, and drive migrations,