Overview

Role: Privileged Access Management (PAM) Engineer

Location: Tampines

The PAM Engineer will play a key role in strengthening the organisation’s identity security posture by supporting Privileged Access Management engineering activities and project implementations. The role focuses on designing, integrating, and maintaining PAM controls across on-premise and cloud environments, ensuring secure management of privileged accounts and sessions.

Key Responsibilities

• Support and execute PAM engineering initiatives, ensuring the secure onboarding, management, and monitoring of privileged identities across the enterprise.
• Develop, customise, and maintain password and session management connectors to onboard privileged accounts into CyberArk.
• Integrate CyberArk with a wide range of platforms, including Windows and UNIX servers, LDAP directories, databases (Oracle, SQL), network appliances, middleware, SaaS applications, and other enterprise systems.
• Collaborate with infrastructure, cloud, and application teams to implement PAM controls across AWS, Azure, and DevOps environments.
• Work with supporting technologies such as SIEM tools, ServiceNow/BMC Remedy, Active Directory, and network configuration components to ensure seamless operations.
• Produce detailed documentation including solution designs, SOPs, and transition materials for operational teams.
• Provide technical oversight and guidance to support teams in troubleshooting PAM issues and resolving incidents.
• Contribute to continuous improvement initiatives by analysing problems, identifying gaps, and enhancing PAM processes and workflows.
• Adapt quickly to evolving requirements in a fast-paced environment while working collaboratively with cross-functional teams.

Required Skills & Experience

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Strong hands-on experience as a PAM Subject Matter Specialist with deep technical knowledge of CyberArk and privileged access controls.
• Extensive background in developing connectors for privileged account onboarding and managing password/session workflows within CyberArk.
• Proven ability to integrate CyberArk with multiple platforms such as LDAP providers, Windows/UNIX systems, databases, networking devices, middleware, and custom/SaaS applications.
• Practical experience with related technologies including SIEM, ITSM platforms (ServiceNow, BMC Remedy), Active Directory, UNIX/Linux, Windows Server, and basic network configuration.
• Experience deploying PAM capabilities in cloud ecosystems (AWS, Azure, DevOps) and managing privileged identities in cloud environments.
• Strong documentation skills with the ability to communicate solutions clearly and facilitate knowledge transfer.
• Excellent analytical and problem-solving abilities, with a strong focus on teamwork, adaptability, and continuous learning.

Good to Have

• Professional certifications in PAM or related CyberArk technologies.
• Experience implementing Application Access Manager (AAM) or Secrets Hub solutions.