Cybersecurity Architect (CyberArk) - APAC IAM Production

About the role

Sopra Steria is hiring an APAC IAM Production-Cybersecurity Architect (CyberArk) in Singapore to assist a client in the banking industry, a leading global investment bank. The role leads the design, implementation and continuous improvement of CyberArk vault and associated PAM solutions across all APAC operations, reporting to the APAC Head of IAM Production. It is accountable for securing, monitoring and governing privileged credentials and sessions.

Key responsibilities

• Define and own the enterprise-wide CyberArk architecture (Vault, CPM, PSM, PVWA, Conjur) supporting the bank's technical accounts inventory.
• Design and enforce privileged-access policies (least privilege, separation of duties, time-bound access) across Windows, Linux, UNIX, databases and cloud platforms (AWS, Azure, GCP).
• Provide high-availability support for CyberArk, with monitoring, incident response and disaster recovery keeping critical services running 24x7.
• Drive the secret-management lifecycle: automatic password rotation, SSH key management, API-credential vaulting and on-demand retrieval.
• Partner with engineering, application and cloud teams to embed secure identity controls in new services, migrations and upgrades.
• Automate PAM processes with PowerShell, Python and CyberArk REST APIs (bulk onboarding/offboarding, rotation schedules).
• Evaluate emerging PAM technologies (e.g. CyberArk Conjur, Secret-Zero, Zero-Trust Privilege) and build business cases for adoption.
• Embed privileged-access controls into CI/CD pipelines and cloud-native workloads with DevSecOps, Cloud and Application teams.

Required profile

• Minimum 8+ years of experience as a security professional.
• Bachelor's degree in computer science, information security or a related field (Master's preferred).
• Hands-on experience architecting, deploying and operating CyberArk PAS at enterprise scale.
• CyberArk Certified Defender (CCD) and Secrets Manager (Conjur) certifications.
• Ability to influence and motivate stakeholders, and to handle high-pressure situations with both business executives and technical teams.

Required skills

• CyberArk Core PAS and Privileged Threat Analytics; Conjur policy-as-code (HCL), secret rotation, Kubernetes side-car injection.
• Windows, UNIX, Linux authentication, Kerberos, LDAP/AD, SSH, database authentication.
• Integration with SSO/IdP (SAML, OIDC, AD); AWS Secrets Manager, Azure Key Vault.
• PowerShell, Python and CyberArk REST API for automation.
• Zero-trust concepts for privileged access.

What we offer

• Hybrid working mode and 18 days of annual leave.
• Comprehensive health and insurance covering GP, hospitalization, dental and optical.
• Annual performance bonus.
• Training programs, certification opportunities and learning incentives.
• Regular team-building activities and social events.