AVP, Cyberark Engineer, Information Security Services, Group Technology

Business Function

Group Technology enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group Technology, we manage the majority of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.

Responsibilities

• Provides vision for privileged access management, enables innovation, and aligns with industry trends and continuous improvements that enhances the security posture of the bank with regards to privileged access.
• Responsible for project management, deployment and operations support of new initiatives in the privileged access management space.
• Drive the automation and integration of privileged access management infrastructure to other systems to achieve straight through processing and reduce manual work.
• Responsible for the day-to-day support, monitoring, upgrades, patching, configuration, and management of privileged access infrastructure.
• Provide on-going operations support including management reporting and operations dashboards relating to the governance oversight of privileged accounts and passwords.

Requirements

• The ideal candidate must be 'hands-on', well organized, risk and compliance focused, and self-driven as this is a fast-paced and highly technical environment. Someone wanting to learn and grow with an organization will thrive in this role. The role requires excellent prioritization, responsiveness, along with excellent verbal and written communication skills.
• Requires strong technical experience in CyberArk, including deployment, configuration, management, and support of all CyberArk infrastructure components (Vault / PSM / PSMP / Html5GW / CPM / PVWA / EVD / CP / CCP). This includes regional support and integration of CyberArk via APIs. CyberArk certifications are preferred.
• Willing to work 24/7 rotaational shift
• Able to write PowerShell scripts and SQL statements to develop management reports on the usage and operations management of privileged accounts.
• Experience with Tableau data visualization tool for dashboarding.
• Strong understanding of enterprise privileged access management, risk management, compliance, governance, and control.
• Strong understanding of key platform OS/databases e.g., Windows, Unix, MSSQL, MariaDB. Prior experience in administering such key platforms is preferred.
• Experience in working in banking environment is preferred.
• Bachelor’s degree in computer science, Information Systems, or Engineering (or similar) OR combination of relevant professional experience and education, such as CyberArk certifications.

Technical Competencies

• CyberArk Products Knowledge: Deep understanding of CyberArk's suite of products including CyberArk Vault, Privileged Session Manager (PSM), Privileged Threat Analytics (PTA), Endpoint Privilege Manager (EPM), etc.
• Privileged Access Management (PAM): Strong understanding of PAM concepts and practices, including managing, controlling, and monitoring privileged access across the enterprise.
• Identity and Access Management (IAM): Knowledge of IAM principles and technologies, particularly as they relate to privileged accounts and access controls.
• Operating Systems: Familiarity with various operating systems (Windows, Linux/Unix) to configure and integrate CyberArk solutions within diverse IT environments.
• Scripting and Automation: Ability to write scripts (e.g., PowerShell, Bash) and automate processes for tasks such as account management, policy enforcement, and reporting within CyberArk.
• Integration Skills: Experience integrating CyberArk solutions with other security tools, identity providers (e.g., Active Directory, LDAP), ticketing systems, SIEM (Security Information and Event Management), and other IT infrastructure components.
• Encryption and Key Management: Understanding of encryption methods, key management, and secure cryptographic practices relevant to protecting sensitive data within CyberArk.
• Troubleshooting and Problem-Solving: Proficiency in diagnosing and resolving technical issues related to CyberArk implementations, including analyzing logs, debugging configurations, and applying appropriate fixes.
• Security Protocols and Standards: Knowledge of security protocols such as SSL/TLS, SAML, OAuth, Kerberos, etc., and standards like LDAP, PKI, SSH, etc., which are relevant to CyberArk's functionalities.
• Continuous Learning and Adaptability: Given the evolving nature of cybersecurity threats and technologies, a CyberArk Engineer should have a mindset of continuous learning and be adaptable to new challenges and updates in the field.
• Understanding of database management systems such as Oracle, Microsoft SQL Server, MySQL, MariaDB, PostgreSQL.
• Ability to integrate CyberArk solutions with databases to manage and secure privileged accounts, credentials, and access to sensitive data stored within databases.

Location:

DBS Asia Hub

Job:

Technology

Schedule:

Regular

Employee Status:

Full time