PAM & PKI Security Architect (Consultant)

NCS; Singapore; On-site; SGD 72,000 - 96,000; Full time

Job summary

NCS is seeking a Consultant, IT Security (CyberArk PAM/IAM) in Singapore to architect, deploy, and maintain PAM, PKI, and key management solutions. You will collaborate with cybersecurity, infrastructure, and application teams to ensure secure digital communications, authentication and data protection.

Responsibilities include designing, deploying and configuring PAM and PKI architectures, integrating with AD/LDAP and cloud platforms, and documenting architectures and SOPs.

Qualifications

• Must have 1–3 years in CyberSecurity.
• Nice to have CyberArk PAM and PKI experience.
• Degree or higher education qualifications.
• Singapore Citizen due to project sensitivity.

Responsibilities

• Design, deploy, and configure enterprise PAM solutions (e.g., CyberArk, BeyondTrust).
• Integrate PAM with IAM systems, Active Directory, LDAP, and cloud platforms.
• Implement privileged account discovery and onboarding processes.
• Develop technical documentation, architecture diagrams, and SOPs.
• Design and implement enterprise PKI architecture (root CA, subordinate CAs, issuing CAs).
• Deploy PKI components including Certificate Authorities and Registration Authorities.
• Establish certificate templates, policies, and automated lifecycle management.
• Integrate PKI with applications, network devices, and cloud platforms.
• Design and implement key management solutions for encryption key lifecycle.
• Deploy HSMs and key management systems.
• Implement encryption solutions for data at rest, in transit, and in use.

Skills

Cybersecurity

CyberArk PAM

PKI

IAM

Education

Bachelor's degree or higher

Tools

Active Directory

LDAP

HSMs

Certificate Authorities

Job description

NCS is seeking a Consultant, IT Security (CyberArk PAM/IAM) in Singapore to architect, deploy, and maintain PAM, PKI, and key management solutions. You will collaborate with cybersecurity, infrastructure, and application teams to ensure secure digital communications, authentication and data protection.

Responsibilities include designing, deploying and configuring PAM and PKI architectures, integrating with AD/LDAP and cloud platforms, and documenting architectures and SOPs.