MALTEM ASIA PTE. LTD. Hiring! Full Time Cyber Security Architect (CyberArk - PAM - L3 Conjur - Python - BASH - CISSP) in Central Region (Singapore), Earn up to SGD 8,000 - Ricebowl

Maltem Asia-Pacific is currently seeking a Cyber Security Architect for our i-Banking Client.

Summary:

• Experienced CyberArk and Privileged Access Management (PAM) Architect with deep expertise in CyberArk solutions (Vault, PSM, CPM, PVWA, Conjur) and enterprise PAM implementations. Demonstrated L3 proficiency in Conjur, including architecture, policy-as-code, secret lifecycle automation, and Kubernetes integration, complemented by extensive hands-on experience delivering end-to-end privileged identity and secret management solutions.
• Proven ability to design and operate highly available, resilient identity platforms with comprehensive monitoring, automated remediation, and disaster recovery capabilities. Strong stakeholder engagement skills with a commitment to governance, compliance, and security best practices.

Responsibilities:

• Design, define, and own the enterprise CyberArk architecture, including Vault, CPM, PSM, PVWA, and Conjur, supporting privileged account and technical identity management across the organization.
• Develop and enforce privileged access policies based on least privilege, separation of duties, and just-in-time access principles across Windows, Linux, UNIX, databases, and cloud environments (AWS, Azure, GCP).
• Ensure high availability of the CyberArk platform through proactive monitoring, incident management, capacity planning, and disaster recovery processes supporting 24×7 operations.
• Lead enterprise secret management initiatives, including automated password rotation, SSH key management, API credential vaulting, and secure on-demand credential retrieval.
• Partner with infrastructure, application, cloud, and engineering teams to integrate privileged access controls into new platforms, cloud migrations, and application deployments.
• Automate CyberArk administration and operational processes using PowerShell, Python, and CyberArk REST APIs, including bulk onboarding/offboarding, credential lifecycle management, and operational workflows.
• Assess emerging PAM technologies and capabilities, including CyberArk Conjur, Secret Zero, and Zero Trust Privilege models, providing architectural recommendations and implementation strategies.
• Collaborate with DevSecOps, Cloud, and Application Engineering teams to integrate privileged access management into CI/CD pipelines and cloud-native environments.

Technical Skills:

• Minimum 8 years of experience in Information Security, Cyber Security, or Privileged Access Management.
• Bachelor’s degree in Computer Science, Information Security, or a related discipline (Master’s degree preferred).
• Extensive experience designing, deploying, and operating CyberArk PAS solutions (Vault, CPM, PSM, PVWA) within large-scale enterprise environments.
• Advanced (L3) expertise in CyberArk Conjur, including Policy-as-Code (CPL/HCL), dynamic secrets, secret rotation, Kubernetes sidecar injection, and API/CLI integrations.
• Strong knowledge of CyberArk Core PAS components and CyberArk Privileged Threat Analytics.
• Solid understanding of Windows, UNIX, and Linux authentication mechanisms, including Kerberos, LDAP/Active Directory, SSH, and database authentication.
• Experience integrating CyberArk with enterprise identity providers and SSO technologies using SAML, OIDC, and Active Directory.
• Proficiency in PowerShell, Python, and CyberArk REST APIs for automation and platform integration.
• Experience with cloud-native secret management services, including AWS Secrets Manager, Azure Key Vault, and hybrid identity environments.
• Strong understanding of Zero Trust architecture and privileged access security principles.
• CyberArk Certified Defender (CCD) certification preferred.
• CyberArk Secrets Manager (Conjur) certification preferred.

Preferred Qualifications:

• 7+ years of overall Cyber Security experience, including at least 4 years in security use case design, development, implementation, and automation.
• Experience with SIEM platforms, particularly the ELK (Elasticsearch, Logstash, Kibana) stack, is advantageous.
• Industry-recognized security certifications such as CISSP, OSCP, SANS GIAC, or equivalent are desirable.
• Experience with scripting and automation using Python, PowerShell, Bash, and SQL.