Platform Engineer (CyberArk Engineer)

PERSOLKELLY SINGAPORE PTE. LTD.; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

A technology firm in Singapore is looking for a CyberArk Engineer to deploy, configure, and maintain CyberArk components while managing privileged accounts and implementing security policies. The successful candidate will have strong scripting skills, a CyberArk delivery certification, and at least three years of relevant experience. This position offers a competitive salary reflecting the specialist skills required.

Qualifications

• CyberArk Certified Delivery Engineer (CDE) certification is a must.
• 3+ years of experience with CyberArk solutions in enterprise environments.
• Strong understanding of Windows/Linux systems and network security fundamentals.

Responsibilities

• Deploy, configure, and maintain CyberArk components.
• Manage onboarding and lifecycle of privileged accounts.
• Implement CyberArk policies aligned with compliance standards.

Skills

Scripting (PowerShell, Python)

CyberArk components management

Identity and access management concepts

Education

Bachelor's degree in Computer Science or related field

Job description

Key Responsibilities

• Deploy, configure, and maintain CyberArk components, including Vault, CPM, PSM, PSMP, HTML5GW, CP, CCP, EVD and PVWA.
• Manage the onboarding and lifecycle of privileged accounts across various systems and environments.
• Implement CyberArk policies and security best practices to align with compliance and regulatory standards.
• Develop and maintain automation scripts and integrations with CyberArk using REST APIs, PowerShell, and other tools.
• Monitor and troubleshoot CyberArk infrastructure and user issues, providing escalation support as needed.
• Troubleshoot and remediate CyberArk Central Policy Manager (CPM) failures, including credential rotation errors, connectivity issues, and policy misconfigurations.
• Analyse CPM logs and error codes to identify root causes and implement durable solutions in collaboration with infrastructure and application teams.
• Perform health checks and tuning of CPM components to ensure stability and optimal performance.
• Develop and maintain custom CPM and PSM connectors for target platforms not natively supported by CyberArk.
• Work with application owners to gather requirements for new connectors, create integration documentation, and test connector functionality in pre-production environments.
• Leverage scripting (e.g., PowerShell, Python) to enhance connector behavior and automate remediation tasks.
• Contribute to the connector certification process and maintain version control for custom components.
• Assist with audits, documentation, and reporting of privileged access activities.
• Work with IT, DevOps, and Security teams to integrate PAM solutions into existing workflows.
• Stay up to date with emerging threats, PAM trends, and CyberArk product updates.

Required Qualifications

• CyberArk Certified Delivery Engineer (CDE) certification (must-have).
• 3+ years of experience implementing and supporting CyberArk solutions in enterprise environments.
• Proficiency with CyberArk components and architecture.
• Strong scripting skills (PowerShell, Python, etc.) and experience using CyberArk APIs.
• Understanding of identity and access management (IAM) concepts, Zero Trust, and least privilege.
• Solid knowledge of Windows/Linux systems, Active Directory, and network security fundamentals.

Preferred Qualifications

• Experience or certification with Sentry.
• CyberArk Defender or Guardian certification(s).
• Familiarity with cloud PAM implementations (AWS, Azure, GCP).
• Experience with SIEM tools and security monitoring.
• Bachelor’s degree in computer science, Information Security, or related field.

EA License No. 01C4394 • RCB No. 200007268E •Derrick Tiew Yong Han EA Registration No. R1877971

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.