Cybersecurity Architect

We are seeking an experienced CyberArk PAM Architect to join our Cybersecurity team. The successful candidate will be responsible for defining and owning enterprise-wide CyberArk architecture, securing privileged access across hybrid infrastructure, and driving advanced secret-management capabilities using CyberArk PAS and Conjur. The role requires strong L3-level expertise in CyberArk, Conjur, automation, high-availability architecture, and cloud-native security.

Roles & Responsibilities:

• Define and own the enterprise-wide CyberArk architecture covering Vault, CPM, PSM, PVWA and Conjur to support the organization's technical-account inventory.
• Design and enforce privileged-access policies based on least privilege, separation of duties and time-bound access across Windows, Linux, UNIX, databases and cloud platforms.
• Architect and support highly available CyberArk platforms with robust monitoring, incident response, automated remediation and documented disaster-recovery procedures.
• Drive the complete secrets-management lifecycle, including automated password rotation, SSH key management, API credential vaulting and on-demand credential retrieval.
• Automate PAM processes using PowerShell, Python and CyberArk REST APIs, including bulk onboarding/offboarding and credential rotation.
• Provide L3 expertise for CyberArk Conjur, including policy-as-code, secret lifecycle automation, dynamic secrets and Kubernetes integration.
• Evaluate emerging PAM and secrets-management technologies such as CyberArk Conjur, Secret-Zero and Zero-Trust Privilege, and develop business cases for adoption.

Job Requirement:

• Must have a bachelor’s degree in computer science, Information Security, Information Technology or a related field; Master’s degree preferred.
• Minimum 8+ years of experience as a cybersecurity/security professional. Overall experience not more than 15 years .
• Strong hands-on experience architecting, deploying and operating CyberArk PAS at enterprise scale.
• Expert knowledge of CyberArk Vault, CPM, PSM and PVWA.
• Mandatory L3-level expertise in CyberArk Conjur, including policy-as-code, secret rotation, dynamic secrets and Kubernetes integration.
• Must Have Technical Skills: CyberArk PAM: Vault, CPM, PSM, PVWA and CyberArk Conjur: L3, policy-as-code, CPL/HCL, secret rotation, dynamic secrets, Kubernetes integration
• Strong experience with CyberArk Privileged Threat Analytics and PAM analytics.
• Proven experience designing and implementing high-availability and resilient identity/PAM platforms.
• Proficiency in PowerShell, Python and CyberArk REST APIs for PAM automation.

Good to Have:

• CyberArk Certified Defender (CCD) certification.
• CyberArk Conjur / Secrets Manager certification.

Interested candidates may apply through the application system or send their CV to [email protected]. Shortlisted candidates will be notified.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to Morgan McKinley Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available on the Morgan McKinley Singapore website. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Morgan McKinley Pte Ltd

Dinu Dinesh

EA License No: 11C5502

EAP Registration No: R22110286