As the APAC IAM Production & Cybersecurity Architect - CyberArk, you will lead the design, implementation, and continuous improvement of the CyberArk vault and associated PAM solutions across all APAC operations. You will act as the regional technical authority and escalation point for the platform, working closely with global IAM, engineering, cloud and application teams.
Key Responsibilities:
- Define and own the enterprise-wide CyberArk architecture (Vault, CPM, PSM, PVWA, Conjur) supporting the organisation's technical accounts inventory.
- Design and enforce privileged-access policies- least privilege, separation of duties, time-bound access - across Windows, Linux, UNIX, databases and cloud platforms (AWS, Azure, GCP).
- Provide high-availability support for the CyberArk platform, establishing robust monitoring, incident response and disaster-recovery processes that keep critical services running 24×7.
- Drive the secret management lifecycle: automatic password rotation, SSH key management, API credential vaulting, and on-demand retrieval.
- Automate PAM processes using PowerShell, Python and CyberArk REST APIs (e.g. bulk onboarding/offboarding, credential rotation schedules).
- Evaluate emerging PAM technologies (CyberArk Conjur, Secret Zero, Zero-Trust Privilege) and build business cases for adoption.
- Expert knowledge of CyberArk (Vault, PSM, CPM) and PAM solutions.
- Demonstrated L3-level expertise in Conjur — design, policy-as-code, secret lifecycle automation and Kubernetes integration — combined with deep hands-on experience in CyberArk Privileged Access Management, enabling end-to-end secret management and privileged account implementation.
Technical skills:
- Owns CyberArk architecture end-to-end (Vault, CPM, PSM, PVWA, Conjur) — design, HA, DR, 24×7 production security.
- Must-haves: 8+ yrs security, full-scale CyberArk deployment, L3 Conjur, banking IT infra, databases.
- Scripting in Python/PowerShell/Bash; certs: CyberArk Defender (CCD) + Secrets Manager (Conjur).
Certifications
- CyberArk Certified Defender (CCD)
- CyberArk Secrets Manager (Conjur) certification
