Security Architect

TEKsystems Hong Kong Hong Kong
Full time Permanent On-site Competitive

About the job

  • APAC wide role at Global FS firm
  • Variety of different project exposure
  • Design and hands on implementation responsabilities
My banking client are looking for an IAM Architect to be responsible for the design, implementation, governance, and continuous improvement of the Privileged Access Management (PAM) platform, with a focus on CyberArk technologies. The role ensures secure management of privileged accounts, credentials, and secrets across enterprise infrastructure, cloud platforms, and applications.

Key Responsibilities
- Own and maintain the CyberArk architecture, including Vault, CPM, PSM, PVWA, and Conjur.
- Design and enforce privileged access controls based on least privilege, segregation of duties, and time-bound access.
- Provide architectural leadership and L3 support for CyberArk and PAM services.
- Ensure platform resilience through monitoring, incident response, and disaster recovery processes.
- Lead secrets management initiatives, including password rotation, SSH key management, and API credential vaulting.
- Automate PAM processes using PowerShell, Python, and CyberArk REST APIs.
- Integrate privileged access controls into cloud environments, applications, and CI/CD pipelines.
- Collaborate with infrastructure, cloud, DevSecOps, and application teams to embed secure identity controls.
- Evaluate and recommend new PAM and privileged access technologies to enhance security capabilities.