As Singapore’s longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires.
Today, we’re on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia’s leading financial services partner for a sustainable future.
We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career.
Your Opportunity Starts Here.
Why Join
Cybersecurity is core to OCBC’s mission, and strong governance is the backbone of our defence. OCBC is Singapore’s longest established bank, and we’ve been helping people and businesses achieve their ambitions since 1932. Today, we continue to evolve—leveraging technology, innovation, and a future ready mindset to build the bank of tomorrow.
If you’re passionate about access security, automation, enterprise technology, or building a strong foundation in cybersecurity, this is the place to grow.
How you succeed
As a PAM Engineering Specialist, you will design and deliver the next generation of our Privileged Access Management capabilities. You will be the engineering lead for PAM product capabilities—owning technical design, integrations, automation, and platform modernization. You will build and maintain reusable blueprints, APIs, and connectors (CPM/PSM/Conjur), uplift secrets management for applications and DevOps, reduce technical debt, and enable data‑driven controls. You will partner closely with PAM Tech Support (for reliable operations), Privilege Identity Admin (for streamlined onboarding), and PAM Governance (to embed controls by design) to deliver PAM operational excellence across OCBC Group.
What you do
1. Product Engineering & Modernization
Engineer new PAM capabilities and enhancements across CyberArk EPV (Vault, PVWA, CPM, PSM, PTA) and Conjur (clusters, authentication methods, policies).
Own technical roadmap and modernization to reduce technical debt, standardise patterns, and uplift performance, scalability, and resilience.
Design secure secrets‑management patterns for applications, microservices, and pipelines (OpenShift, CI/CD).
2. Automation
Automate CPM/PSM platform lifecycle (deploy/upgrade/test), certificate renewal, policy‑as‑code, configuration drift detection, and health checks.
Integrate with SOAR/IAM/SIEM and authoritative sources to embed controls and telemetry by design.
3. Integrations & Connectors
Engineer CPM/PSM connectors and Conjur integrations with operating systems, databases, middleware, cloud, and enterprise applications; reduce dual‑controlled IDs by expanding platform coverage.
Build SDK/API‑based onboarding toolkits and self‑service blueprints for application teams.
4. Architecture & Design Assurance
Define PAM reference architectures, secure configuration baselines, and performance standards for EPV/Conjur and their dependencies.
Conduct design reviews and proofs‑of‑concept; provide L3 engineering guidance to PID Admin and Tech Support.
5. Data, Telemetry & Reliability Enablement
Partner with Tech Support to improve observability (structured logs, metrics, traces) and SLOs; instrument automation to verify upgrades and releases.
Enable analytics‑ready outputs to support Governance dashboards and continuous control monitoring.
6. Cross‑Team Collaboration
With PAM Tech Support: hand over engineered changes with runbooks and tests; support complex incident root‑cause analysis as L3 engineer.
With Privilege Identity Admin: streamline T+1 onboarding (tooling, discovery feeds, templates) and reduce onboarding lead time via automation.
With PAM Governance: embed controls into designs; provide engineering evidence for control assurance and reviews.
Who you are
Diploma or Degree in IT, Cybersecurity, Computer Science, or related fields.
Experience
Minimum 7 years’ experience in PAM technical support, cybersecurity/platform engineering with 3–5+ years focused on CyberArk EPV and/or Conjur engineering (design, integrations, automation).
Technical Knowledge
Deep knowledge of EPV components (Vault, PVWA, CPM, PSM, PTA) and Conjur (cluster design, authn‑k8s/cloud, policy models).
Strong automation/IaC (PowerShell, Python, Ansible, Terraform) and CI/CD (e.g., Azure DevOps, GitLab, Jenkins).
Proven connector engineering for CPM/PSM and API/SDK‑based integrations with operating systems, databases, middleware, and cloud.
Solid grounding in secure design, secrets‑management patterns, and performance engineering.
Skills
Architecture‑level problem solving; ability to influence across Infrastructure, Cloud, and Application teams.
Clear documentation and knowledge transfer (blueprints, design standards, runbooks).
Independent, resourceful, and able to operate in a regulated environment.
Strong stakeholder management and collaboration
Certifications (Preferred)
CyberArk Sentry, Guardian (engineering/architect).
CISSP/CCSP or equivalent.
Who we are
As Singapore's longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires.
Today, we're on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation.
But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia's leading financial services partner for a sustainable future.
We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career. Your Opportunity Starts Here.
What we offer
Competitive base salary. A suite of holistic, flexible benefits to suit every lifestyle. Community initiatives. Industry-leading learning and professional development opportunities. Equal opportunity. Fair employment. Selection based on ability and fit with our culture and values. Your wellbeing, growth and aspirations are every bit as cared for as the needs of our customers.
Competitive base salary. A suite of holistic, flexible benefits to suit every lifestyle. Community initiatives. Industry-leading learning and professional development opportunities. Your wellbeing, growth and aspirations are every bit as cared for as the needs of our customers.
Top Skills
OCBC Bank Singapore Office
65 Chulia St, Singapore, 049513
