IAM Architect

What You'll Do

• Architect, implement, and operate CyberArk Privilege Cloud (PAM) end-to-end, including onboarding, credential rotation, session management, and JIT access.
• Define enterprise PAM architecture, standards, and security best practices aligned with Zero Trust.
• Lead privileged access onboarding for servers, databases, cloud platforms, applications, and service accounts .
• Integrate PAM with IGA platforms (Saviynt preferred) , Microsoft Entra ID , ITSM, and SIEM tools.
• Support audits, compliance requirements, and continuous risk reduction.
• Mentor IAM engineers and collaborate with application, cloud, and security teams.
• Required Skills & Experience 10+ years of experience in Identity & Access Management / PAM .
• Expert-level hands-on experience with CyberArk Privilege Cloud .
• Strong understanding of privileged access security , least privilege, JIT, and session monitoring.
• Experience with Saviynt and Entra ID is desired. · Ensure solutions meet security, performance, availability, compliance, and cost objectives. · Produce clear architecture documentation (HLDs, diagrams, principles, decision records).
• Strong architecture mindset with hands-on execution ability.
• Excellent stakeholder communication and leadership skills.
• Security-first thinker with a passion for automation and continuous improvement.
• Nice to Have CyberArk, Saviynt, or Microsoft security certifications.
• Cloud IAM experience (Azure / AWS / GCP).
• Information about our benefits you can find here: https://gf.com/about-us/careers/opportunities-asia