AVP, Cyberark Engineer, Information Security Services, Group Technology

Requirements

• The ideal candidate must be 'hands-on', well organized, risk and compliance focused, and self-driven as this is a fast-paced and highly technical environment. Someone wanting to learn and grow with an organization will thrive in this role. The role requires excellent prioritization, responsiveness, along with excellent verbal and written communication skills.
• Requires strong technical experience in CyberArk, including deployment, configuration, management, and support of all CyberArk infrastructure components (Vault / PSM / PSMP / Html5GW / CPM / PVWA / EVD / CP / CCP). This includes regional support and integration of CyberArk via APIs. CyberArk certifications are preferred.
• Willing to work 24/7 rotaational shift
• Able to write PowerShell scripts and SQL statements to develop management reports on the usage and operations management of privileged accounts.
• Experience with Tableau data visualization tool for dashboarding.
• Strong understanding of enterprise privileged access management, risk management, compliance, governance, and control.
• Strong understanding of key platform OS/databases e.g., Windows, Unix, MSSQL, MariaDB. Prior experience in administering such key platforms is preferred.
• Experience in working in banking environment is preferred.
• Bachelor’s degree in computer science, Information Systems, or Engineering (or similar) OR combination of relevant professional experience and education, such as CyberArk certifications.

Technical Competencies

• CyberArk Products Knowledge: Deep understanding of CyberArk's suite of products including CyberArk Vault, Privileged Session Manager (PSM), Privileged Threat Analytics (PTA), Endpoint Privilege Manager (EPM), etc.
• Privileged Access Management (PAM): Strong understanding of PAM concepts and practices, including managing, controlling, and monitoring privileged access across the enterprise.
• Identity and Access Management (IAM): Knowledge of IAM principles and technologies, particularly as they relate to privileged accounts and access controls.
• Operating Systems: Familiarity with various operating systems (Windows, Linux/Unix) to configure and integrate CyberArk solutions within diverse IT environments.
• Scripting and Automation: Ability to write scripts (e.g., PowerShell, Bash) and automate processes for tasks such as account management, policy enforcement, and reporting within CyberArk.
• Integration Skills: Experience integrating CyberArk solutions with other security tools, identity providers (e.g., Active Directory, LDAP), ticketing systems, SIEM (Security Information and Event Management), and other IT infrastructure components.
• Encryption and Key Management: Understanding of encryption methods, key management, and secure cryptographic practices relevant to protecting sensitive data within CyberArk.
• Troubleshooting and Problem-Solving: Proficiency in diagnosing and resolving technical issues related to CyberArk implementations, including analyzing logs, debugging configurations, and applying appropriate fixes.
• Security Protocols and Standards: Knowledge of security protocols such as SSL/TLS, SAML, OAuth, Kerberos, etc., and standards like LDAP, PKI, SSH, etc., which are relevant to CyberArk's functionalities.
• Continuous Learning and Adaptability: Given the evolving nature of cybersecurity threats and technologies, a CyberArk Engineer should have a mindset of continuous learning and be adaptable to new challenges and updates in the field.
• Understanding of database management systems such as Oracle, Microsoft SQL Server, MySQL, MariaDB, PostgreSQL.
• Ability to integrate CyberArk solutions with databases to manage and secure privileged accounts, credentials, and access to sensitive data stored within databases.

Location:

DBS Asia Hub

Job:

Technology

Schedule:

Regular

Employee Status:

Full time