3 дня назад
Cybersecurity Architect (CyberArk)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Cybersecurity Architect (CyberArk) (PAM/Identity Security): Designing and operating enterprise CyberArk vault and privileged-access-management solutions across APAC banking operations with an accent on privileged credential governance, high availability, and cloud-integrated identity controls. Focus on automating secret management, embedding PAM into CI/CD and cloud-native workloads, and strengthening monitoring, incident response, and disaster recovery.
Location: 138 Market St, Singapore; hybrid working mode
Company
is a listed European technology company providing consulting, digital services, software, infrastructure, cloud, and cybersecurity services.
What you will do
- Define and own the enterprise CyberArk architecture, including Vault, CPM, PSM, PVWA, and Conjur.
- Design and enforce privileged-access policies across Windows, Linux, UNIX, databases, cloud platforms, and hybrid IAM environments.
- Operate high-availability CyberArk services with monitoring, incident response, and disaster-recovery processes.
- Manage password rotation, SSH keys, API credentials, and on-demand secret retrieval.
- Automate PAM processes with PowerShell, Python, and CyberArk REST APIs.
- Partner with engineering, cloud, application, and DevSecOps teams to integrate privileged-access controls into services, migrations, upgrades, and CI/CD pipelines.
Requirements
- 8+ years of experience as a security professional.
- Bachelor’s degree in computer science, information security, or a related field; a master’s degree is also mentioned.
- Enterprise-scale experience architecting, deploying, and operating CyberArk PAS, including Vault, CPM, PSM, and PVWA.
- Advanced Conjur knowledge covering policy-as-code, secret rotation, dynamic secrets, Kubernetes sidecar injection, and API/CLI integrations.
- Strong knowledge of CyberArk Privileged Threat Analytics, Windows/UNIX/Linux authentication, Kerberos, LDAP/AD, SSH, databases, SSO/IdP, SAML, OIDC, and AD.
- Proficiency in PowerShell, Python, CyberArk REST API, cloud secret-management services, and zero-trust privileged access.
Nice to have
- CyberArk Certified Defender certification.
- Secrets Manager (Conjur) certification.
- Experience using PAM analytics, session recordings, and anomaly scores for risk-based decisions.
Culture & Benefits
- Hybrid work arrangement.
- 18 days of annual leave.
- Health insurance covering general practitioner, hospitalization, dental, and optical care.
- Annual performance-based bonus.
- Training programs, certification opportunities, learning incentives, team-building activities, and social events.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →