Cybersecurity Architect (Cyberark)

Responsibilities:

1. Define and own the enterprisewide CyberArk architecture (Vault CPM PSM PVWA Conjur ) to support the banks technical accounts inventory.
2. Design and enforce privilegedaccess policies (leastprivilege separationofduties timebound access) across Windows Linux UNIX databases cloud platforms (AWS Azure GCP)
3. 3. Provide high-availability support for the CyberArk establishing robust monitoring incident-response and disaster-recovery processes that keep critical services up and running 247.
4. Drive the secretmanagement lifecycle automatic password rotation SSH key management APIcredential vaulting and ondemand retrieval.
5. Partner with engineering application and cloud teams to embed secure identity controls into every new service launch migration or platform upgrade.
6.  Automate PAM processes using PowerShell Python and CyberArk REST APIs (e.g. bulk onboarding/offboarding credential rotation schedules).
7. Evaluate emerging PAM technologies (e.g. CyberArk Conjur Secret-Zero Zero-Trust Privilege) and build business cases for adoption.
8. Collaborate with DevSecOps Cloud and Application teams to embed privileged-access controls into CI/CD pipelines and cloud-native workload

Qualifications :

Requirements: 

• Requires a minimum of 8 years of experience as security professional
• Bachelors degree in Computer Science Information Security or related field (Masters ).
• Hands-on experience architecting deploying and operating CyberArk PAS (Vault CPM PSM PVWA) at enterprise scale.
• Conjur (CyberArk) L3 policy-as-code (CPL/HCL) secret rotation dynamic secrets Kubernetes side-car injection API/CLI integrations
• Deep expertise in CyberArk Core PAS components and CyberArk Privileged Threat Analytics.
• Strong knowledge of Windows/UNIX/Linux authentication mechanisms Kerberos LDAP/AD SSH database authentication.
• Experience integrating CyberArk with SSO/IdP solutions (SAML OIDC AD).
• Proficiency in PowerShell Python and CyberArk REST API for automation.
• Familiarity with cloud providers (AWS Secrets Manager Azure Key Vault) and HybridIAM environments.
• Solid understanding of ZeroTrust concepts for privileged access.
• Excellent interpersonal and communication skills; ability to influence and motivate
• Leverage PAM analytics (session recordings anomaly scores) to drive risk-based decisions
• Ability to handle high pressure situations with key stakeholders to collaborate and communicate effectively and respectfully with both business-oriented executives and technology-oriented personnel in teams across the organization

Specific qualifications:

• CyberArk Certified Defender (CCD)
• Secrets Manager (Conjur) certified

Additional Information :

Work-life balance: Hybrid working mode and 18 days of Annual leave
Health & insurance: Comprehensive coverage including General Practitioner hospitalization dental and optical
Performance incentives: Annual bonus based on individual performance
Learning & development: Training programs certification opportunities and training incentives to support career growth
Team culture: Regular team-building activities and social events

Remote Work :

No

Employment Type :

Full-time