Senior Cyber Security Engineer (CyberArk)

We're looking for an experienced Cybersecurity Architect (CyberArk) to join a leading global financial institution supporting its APAC Identity & Access Management (IAM) Production team. This is an exciting opportunity to design and enhance enterprise-scale Privileged Access Management (PAM) solutions across a complex, highly secure banking environment.

What You'll Do

• Lead the architecture, implementation, and enhancement of CyberArk Privileged Access Management (PAM) solutions.
• Design and maintain CyberArk components including Vault, CPM, PSM, PVWA, and Conjur.
• Develop and enforce privileged access policies based on least privilege and Zero Trust principles.
• Drive password rotation, secret management, privileged session monitoring, and credential governance.
• Automate PAM processes using PowerShell, Python, and CyberArk REST APIs.
• Partner with Infrastructure, Cloud, DevSecOps, and Application teams to integrate privileged access controls into enterprise platforms and CI/CD pipelines.
• Ensure high availability, resilience, monitoring, and disaster recovery for CyberArk services.
• Evaluate and introduce new CyberArk capabilities and industry best practices.

What We're Looking For

• 8+ years of experience in Cybersecurity, Identity & Access Management, or Privileged Access Management.
• Strong hands-on experience with CyberArk PAS, including Vault, CPM, PSM, and PVWA.
• Experience designing and implementing enterprise CyberArk architectures.
• Hands-on experience with CyberArk Conjur, including secret management, policy-as-code, and Kubernetes integration.
• Experience with Windows, Linux/Unix, Active Directory, LDAP, Kerberos, and SSH authentication.
• Proficiency in PowerShell and/or Python scripting for automation.
• Experience integrating CyberArk with cloud platforms such as AWS and Azure.
• Strong understanding of Zero Trust security principles and privileged identity management.
• Excellent communication and stakeholder management skills.

Nice to Have

• CyberArk Certified Defender (CCD)
• CyberArk Conjur / Secrets Manager certification
• Experience within Banking or Financial Services
• Knowledge of Kubernetes, DevSecOps, and cloud-native security