Senior Cyber Security Consultant (CyberArk)

KEYRUS SINGAPORE PTE. LTD.; Singapore; On-site; SGD 120,000 - 160,000; Full time

Job summary

KEYRUS SINGAPORE PTE. LTD. is seeking an experienced Cybersecurity Architect (CyberArk) to design and enhance PAM across a banking-grade IAM environment in APAC.

You will lead architecture, implement CyberArk components, and enforce least-privilege policies while coordinating across Infra, Cloud, DevSecOps, and application teams. You will drive credential governance, secret management, and automation using PowerShell and Python, with emphasis on high availability and DR for CyberArk services.

Qualifications

• 8+ years of experience in cybersecurity, IAM, or PAM.
• Hands-on CyberArk PAS (Vault, CPM, PSM, PVWA).
• Experience designing enterprise CyberArk architectures.
• Hands-on with CyberArk Conjur, secret management, policy-as-code, Kubernetes.
• Experience with Windows, Linux/Unix, AD/LDAP/Kerberos/SSH.
• Proficiency in PowerShell and/or Python for automation.
• Experience integrating CyberArk with AWS/Azure.
• Strong Zero Trust and privileged identity management understanding.
• Excellent communication and stakeholder management.

Responsibilities

• Lead architecture, implementation, and enhancement of CyberArk PAM.
• Design and maintain CyberArk components (Vault, CPM, PSM, PVWA, Conjur).
• Develop privileged access policies based on least privilege and Zero Trust.
• Drive password rotation, secret management, and credential governance.
• Automate PAM processes using PowerShell and Python via REST APIs.
• Collaborate with Infra, Cloud, DevSecOps and App teams to integrate PAM.
• Ensure high availability, monitoring and DR for CyberArk services.

Skills

Cybersecurity

Identity & Access

Privileged Access

Zero Trust

Automation

PowerShell

Python

Cloud integration

Stakeholder management

Communication

Tools

CyberArk PAS

PVWA

Conjur

Secret Management

Kubernetes

CI/CD

REST APIs

Job description

We're looking for an experienced Cybersecurity Architect (CyberArk) to join a leading global financial institution supporting its APAC Identity & Access Management (IAM) Production team. This is an exciting opportunity to design and enhance enterprise-scale Privileged Access Management (PAM) solutions across a complex, highly secure banking environment.

What You'll Do

• Lead the architecture, implementation, and enhancement of CyberArk Privileged Access Management (PAM) solutions.
• Design and maintain CyberArk components including Vault, CPM, PSM, PVWA, and Conjur.
• Develop and enforce privileged access policies based on least privilege and Zero Trust principles.
• Drive password rotation, secret management, privileged session monitoring, and credential governance.
• Automate PAM processes using PowerShell, Python, and CyberArk REST APIs.
• Partner with Infrastructure, Cloud, DevSecOps, and Application teams to integrate privileged access controls into enterprise platforms and CI/CD pipelines.
• Ensure high availability, resilience, monitoring, and disaster recovery for CyberArk services.
• Evaluate and introduce new CyberArk capabilities and industry best practices.

What We're Looking For

• 8+ years of experience in Cybersecurity, Identity & Access Management, or Privileged Access Management.
• Strong hands-on experience with CyberArk PAS, including Vault, CPM, PSM, and PVWA.
• Experience designing and implementing enterprise CyberArk architectures.
• Hands-on experience with CyberArk Conjur, including secret management, policy-as-code, and Kubernetes integration.
• Experience with Windows, Linux/Unix, Active Directory, LDAP, Kerberos, and SSH authentication.
• Proficiency in PowerShell and/or Python scripting for automation.
• Experience integrating CyberArk with cloud platforms such as AWS and Azure.
• Strong understanding of Zero Trust security principles and privileged identity management.
• Excellent communication and stakeholder management skills.

Nice to Have

• CyberArk Certified Defender (CCD)
• CyberArk Conjur / Secrets Manager certification
• Experience within Banking or Financial Services
• Knowledge of Kubernetes, DevSecOps, and cloud-native security