AVP, CyberArk Engineer - Privileged Access Management

About the role

DBS is hiring an AVP CyberArk Engineer within its Group Technology unit, which manages the bank's operational processes and banking delivery channels. The role provides vision for privileged access management, drives automation and integration of privileged access infrastructure, and supports the day-to-day operation, monitoring and upgrades of the privileged access system. It is based at the DBS Asia Hub and follows a regular schedule.

Key responsibilities

• Provide vision for privileged access management, enable innovation and align with industry trends and continuous improvement to strengthen the bank's security posture.
• Manage projects, deployments and operations support for new privileged access initiatives.
• Drive automation and integration of privileged access infrastructure with other systems to achieve straight-through processing and reduce manual work.
• Handle day-to-day support, monitoring, upgrades, patching, configuration and management of the privileged access infrastructure.
• Provide ongoing operations support, including management reporting and operations dashboards on the governance oversight of privileged accounts and passwords.

Required profile

• Hands-on, well organized, risk and compliance focused, self-driven, with strong prioritization, responsiveness and verbal and written communication skills.
• Willingness to work 24/7 rotational shifts.
• Bachelor's degree in computer science, information systems or engineering (or similar), or equivalent professional experience and education such as CyberArk certifications.
• Prior experience in a banking environment is preferred.

Required skills

• Strong technical experience in CyberArk (Vault, PSM, PSMP, HTML5GW, CPM, PVWA, EVD, CP, CCP), including regional support and API integration; certifications preferred.
• Ability to write PowerShell scripts and SQL statements for management reports on privileged account usage.
• Experience with Tableau for dashboarding.
• Familiarity with Windows, Unix/Linux, MSSQL, MariaDB and Oracle; administration experience preferred.
• Knowledge of IAM, PAM, encryption, key management, and security protocols such as SSL/TLS, SAML, OAuth, Kerberos, LDAP, PKI and SSH.
• Integration with Active Directory, LDAP, ticketing systems and SIEM, and troubleshooting of CyberArk issues.