Consultant

Job Summary: We are seeking a consultant with experience in CyberArk Architect with 8+ years of cybersecurity/PAM experience and strong hands-on expertise across Vault, PVWA, CPM, PSM, PTA, HA/DR and enterprise PAM architecture. The role will focus on designing and enhancing secure, scalable CyberArk solutions, privileged access governance, SSO/IdP integrations, automation and cloud/hybrid IAM environments. Strong experience in Conjur, secrets management, Kubernetes, REST APIs and Zero Trust is highly preferred; CyberArk certifications are an advantage.. Job Responsibilities : • Define and own the enterprise‑wide CyberArk architecture (Vault, CPM, PSM, PVWA, Conjur, ) to support the banks technical accounts inventory. • Design and enforce privileged‑access policies (least‑privilege, separation‑of‑duties, time‑bound access) across Windows, Linux, UNIX, databases, cloud platforms (AWS, Azure, GCP). • Provide high-availability support for the CyberArk, establishing robust monitoring, incident-response, and disaster-recovery processes that keep critical services up and running24×7. • Drive the secret‑management lifecycle – automatic password rotation, SSH key management, API‑credential vaulting, and on‑demand retrieval. • Partner with engineering, application, and cloud teams to embed secure identity controls into every new service launch, migration, or platform upgrade. • Automate PAM processes using PowerShell, Python, and CyberArk REST APIs (e.g., bulk onboarding/off‑boarding, credential rotation schedules). • Evaluate emerging PAM technologies (e.g., CyberArk Conjur, Secret-Zero, Zero-Trust Privilege) and build business cases for adoption • Collaborate with DevSecOps, Cloud, and Application teams to embed privileged-access controls into CI/CD pip Job Requirement: • Bachelor’s degree in Computer Science, Information Security, or related field (Master’s preferred). • Requires a minimum of 8+ years of experience as security professional • Hands-on experience architecting, deploying, and operating CyberArk PAS (Vault, CPM, PSM, PVWA) at enterprise scale is mandatory. • Conjur (CyberArk) –L3 – policy-as-code (CPL/HCL), secret rotation, dynamic secrets, Kubernetes side-car injection, API/CLI integrations • Must to have CyberArk Core PAS components and CyberArk Privileged Threat Analytics. • Strong knowledge of Windows/UNIX/Linux authentication mechanisms, Kerberos, LDAP/AD, SSH, database authentication. • Experience integrating CyberArk with SSO/IdP solutions (SAML, OIDC, AD) is required. • Proficiency in PowerShell, Python, and CyberArk REST API for automation. • Familiarity with cloud providers (AWS Secrets Manager, Azure Key Vault) and Hybrid‑IAM environments. • Solid understanding of Zero‑Trust concepts for privileged access. Specific Qualifications (if required) • CyberArk Certified Defender (CCD) • Secrets Manager(Conjur) certified Interested candidates may apply through the application system or send it to lv@morganmckinley.com . Shortlisted candidates will be notified. By sending us your personal data and curriculum vitae (CV), you are deemed to consent to Morgan McKinley Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.morganmckinley.com/sg/privacy-policy . You acknowledge that you have read, understood, and agree with the Privacy Policy. Morgan McKinley Pte Ltd Dinu Dinesh EA License No: 11C5502 EAP Registration No:R22110286