- Expert knowledge of CyberArk (Vault, PSM, CPM) and PAM solutions.
- Demonstrated L3-level expertise in Conjur
- Define and own enterprise-wide CyberArk architecture
- Lead the design, implementation, and continuous improvement of CyberArk vault and associated PAM solutions across APAC operations. Accountable for securing, monitoring, and governing privileged credentials and sessions to reduce credential theft, insider abuse, and lateral movement risks.
- Expert knowledge of CyberArk (Vault, PSM, CPM) and PAM solutions .
- Demonstrated L3-level expertise in Conjur including policy-as-code, secret lifecycle automation, and Kubernetes integration.
- Proven experience building highly available and resilient identity platforms with monitoring, automated remediation, and disaster recovery procedures.
- Client, customer and stakeholder focus.
- Strong compliance culture and conduct.
- Define and own enterprise-wide CyberArk architecture (Vault, CPM, PSM, PVWA, Conjur).
- Design and enforce privileged-access policies across Windows, Linux, UNIX, databases, and cloud platforms.
- Provide high-availability support for CyberArk services, including monitoring, incident response, and disaster recovery.
- Drive secret-management lifecycle including password rotation, SSH key management, API credential vaulting, and on-demand retrieval.
- Partner with engineering, application, and cloud teams to embed secure identity controls.
- Automate PAM processes using PowerShell, Python, and CyberArk REST APIs.
- Evaluate emerging PAM technologies and develop adoption business cases.
- Collaborate with DevSecOps, Cloud, and Application teams to integrate privileged-access controls into CI/CD pipelines and cloud-native workloads.
- 8+ years of cybersecurity experience.
- Bachelor's degree in computer science, Information Security, or related field; Master's preferred.
- Hands-on experience architecting, deploying, and operating CyberArk PAS at enterprise scale .
- Conjur expertise including policy-as-code, secret rotation, dynamic secrets, Kubernetes integration, and API/CLI integrations.
- Strong knowledge of Windows, UNIX, Linux authentication, Kerberos, LDAP/AD, SSH, and database authentication.
- Experience integrating CyberArk with SSO/IdP solutions using SAML, OIDC, and Active Directory.
- Proficiency in PowerShell, Python, and CyberArk REST APIs.
- Familiarity with AWS Secrets Manager, Azure Key Vault, and hybrid IAM environments.
- Understanding of Zero Trust privileged access concepts.
- Excellent communication and stakeholder management skills.
- CyberArk Certified Defender (CCD).
- CyberArk Secrets Manager (Conjur) certification.
We regret to inform that only shortlisted candidates will be notified.
EA registration number : NG XUAN , R24123530 Allegis Group Singapore Pte Ltd, Company Reg No. 200909448N, EA Licence No. 10C4544
Please Stay Alert to Potential Scams
We would like to remind you that eFinancialCareers is a job board and does not conduct hiring or ask for payment or any financial details as part of the job application process.
If you receive any suspicious messages claiming to be from us or a hiring company, we urge you not to click on any links and not to reply to the message itself.
Instead, please report the message to our support team at support@efinancialcareers.com.
It is advisable to always verify job offers directly with the hiring company.
We’re partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a committed team working with over 6,000 clients across North America, Europe and Asia Pacific.
As an industry leader in talent services, we work with progressive leaders to drive change. That’s the power of true partnership.
TEKsystems is an Allegis Group company.