Associate, Cyberark Engineer, Information Security Services, Group Technology

Business Function

Group Technology enables and empowers the bank with an efficient, nimble, and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability, and innovation. Within Group Technology, we manage the majority of the Bank's operational processes and aim to delight our business partners through multiple banking delivery channels.

Responsibilities

• Provide vision for privileged access management, enabling innovation and aligning with industry trends and continuous improvements to enhance the bank's security posture regarding privileged access.
• Own budgeting, project management, deployment, and operations support for new initiatives in the privileged access management space.
• Drive automation and integration of privileged access management infrastructure with other systems to achieve straight-through processing and reduce manual work.
• Provide day-to-day support for privileged access infrastructure, including monitoring, upgrades, patching, configuration, and management.
• Provide ongoing operations support, including management reporting and operations dashboards for governance oversight of privileged accounts and passwords.

Requirements

• Hands-on, well-organized, risk- and compliance-focused, and self-driven to thrive in a fast-paced, highly technical environment. Strong prioritization, responsiveness, and verbal/written communication skills.
• Strong technical experience with CyberArk, including deployment, configuration, management, and support of all CyberArk infrastructure components, including regional support and integration via APIs. CyberArk certifications are preferred.
• Ability to write PowerShell scripts and SQL statements to develop management reports on privileged account usage and operations.
• Experience with Tableau for data visualization and dashboarding.
• Strong understanding of enterprise privileged access management, risk management, compliance, governance, and control.
• Strong understanding of key platform OS and databases (e.g., Windows, Unix, MSSQL, MariaDB). Prior administration experience is preferred.
• Experience working in a banking environment is preferred.
• Bachelor's degree in Computer Science, Information Systems, or Engineering (or similar), or a combination of relevant professional experience and education (e.g., CyberArk certifications).

Technical Competencies

• CyberArk Products Knowledge: Deep understanding of CyberArk's suite (e.g., CyberArk Vault, Privileged Session Manager (PSM), Privileged Threat Analytics (PTA), Endpoint Privilege Manager (EPM), etc.).
• Privileged Access Management (PAM): Strong understanding of PAM concepts and practices, including managing, controlling, and monitoring privileged access across the enterprise.
• Identity and Access Management (IAM): Knowledge of IAM principles and technologies, particularly as they relate to privileged accounts and access controls.
• Operating Systems: Familiarity with Windows and Linux/Unix to configure and integrate CyberArk solutions across diverse IT environments.
• Scripting and Automation: Ability to write scripts (e.g., PowerShell, Bash) and automate tasks such as account management, policy enforcement, and reporting within CyberArk.
• Integration Skills: Experience integrating CyberArk with other security tools, identity providers (e.g., Active Directory, LDAP), ticketing systems, SIEM, and other IT infrastructure components.
• Encryption and Key Management: Understanding of encryption methods, key management, and secure cryptographic practices for protecting sensitive data within CyberArk.
• Troubleshooting and Problem-Solving: Proficiency in diagnosing and resolving CyberArk issues, including log analysis, configuration debugging, and applying fixes.
• Security Protocols and Standards: Knowledge of security protocols such as SSL/TLS, SAML, OAuth, Kerberos, and standards such as LDAP, PKI, SSH, etc., relevant to CyberArk functionality.
• Continuous Learning and Adaptability: A mindset of continuous learning and adaptability to evolving cybersecurity threats and technologies.
• Database Management Systems: Understanding of Oracle, Microsoft SQL Server, MySQL, MariaDB, and PostgreSQL.
• Database Integration: Ability to integrate CyberArk solutions with databases to manage and secure privileged accounts, credentials, and sensitive data stored within databases.

Location and Employment Details

• Location: DBS Asia Hub
• Job: Technology
• Schedule: Regular
• Employee Status: Full time