全职 Cyberark Engineer 工作, 薪水, Morgan McKinley Selangor 公司招聘中 - Ricebowl

Job Title: CyberArk Secret Management Engineer

Location: PJ, Malaysia

Employment Type: Permanent

Employment: Hybrid

Job Description Summary

We are seeking a experienced CyberArk Engineer with strong expertise in CyberArk Secret Management (SaaS and self-hosted) mainly SaaS. The role involves designing, implementing, and optimizing enterprise-grade secret management solutions for clients.

Job Description

Key Responsibilities:

• Design and implement CyberArk Secret Management solutions, including:
• CyberArk SaaS-based Secret Management
• Self-hosted solutions such as AAM / CCP
• Lead end-to-end deployment and integration of:
• Central Credential Provider (CCP)
• Application Access Manager (AAM)
• SaaS-based secrets management for cloud-native and modern applications
• Integrate CyberArk with:
• Enterprise applications (on-premises and cloud)
• DevOps pipelines (CI/CD)
• Containerized and microservices environments
• Define and enforce secrets lifecycle management (storage, rotation, access control, auditing)
• Provide technical design, architecture guidance, and best practices
• Perform advanced troubleshooting and optimization
• Ensure compliance with audit, regulatory, and security standards

Required Skills & Experience:

• Strong hands-on experience with:
• CyberArk Secret Management (SaaS solutions)
• CyberArk AAM / CCP (self-hosted Secret Management)
• Mandatory:
• Hands-on experience in designing and building at least 1 CyberArk Secret Management

(SaaS) deployments within the past 1 year

• CyberArk certifications (Defender, Sentry, CDE, Guardian)
• Proven experience in:
• End-to-end CyberArk solution design and implementation
• Deep understanding of:
• Secrets management architecture and best practices
• Secure application authentication (API, tokens, certificates)
• IAM and least privilege principles
• Experience integrating CyberArk with:
• Applications and middleware
• DevOps tools (e.g., Jenkins, Ansible, Kubernetes, etc.)
• Strong knowledge of:
• Windows and Linux platforms
• Networking and enterprise security fundamentals
• Ability to work independently and lead technical delivery

Good to Have:

• CyberArk PAM (SaaS and Self-Hosted) knowledge (Vault, PVWA, CPM, PSM)
• Experience in CyberArk upgrades or migrations
• Exposure to cloud platforms (Azure, AWS, GCP)
• Scripting skills (PowerShell, Python, REST API)

Key Requirements:

• Senior-level engineer with recent and proven SaaS Secret Management delivery experience
• Able to work independently with minimal supervision
• Strong stakeholder communication and solutioning capability