Overview

WHO WE ARE:

As Singapore’s longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires.

 Today, we’re on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia’s leading financial services partner for a sustainable future.

 We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career.

Your Opportunity Starts Here.

Why Join

Cybersecurity is core to OCBC’s mission, and strong governance is the backbone of our defence. OCBC is Singapore’s longest established bank, and we’ve been helping people and businesses achieve their ambitions since 1932. Today, we continue to evolve—leveraging technology, innovation, and a future ready mindset to build the bank of tomorrow.

If you’re passionate about access security, automation, enterprise technology, or building a strong foundation in cybersecurity, this is the place to grow.

How you succeed
As a PAM Engineering Specialist, you will design and deliver the next generation of our Privileged Access Management capabilities. You will be the engineering lead for PAM product capabilities—owning technical design, integrations, automation, and platform modernization. You will build and maintain reusable blueprints, APIs, and connectors (CPM/PSM/Conjur), uplift secrets management for applications and DevOps, reduce technical debt, and enable data‑driven controls. You will partner closely with PAM Tech Support (for reliable operations), Privilege Identity Admin (for streamlined onboarding), and PAM Governance (to embed controls by design) to deliver PAM operational excellence across OCBC Group.

What you do

1. Product Engineering & Modernization

  • Engineer new PAM capabilities and enhancements across CyberArk EPV (Vault, PVWA, CPM, PSM, PTA) and Conjur (clusters, authentication methods, policies).

  • Own technical roadmap and modernization to reduce technical debt, standardise patterns, and uplift performance, scalability, and resilience.

  • Design secure secrets‑management patterns for applications, microservices, and pipelines (OpenShift, CI/CD).

2. Automation

  • Automate CPM/PSM platform lifecycle (deploy/upgrade/test), certificate renewal, policy‑as‑code, configuration drift detection, and health checks.

  • Integrate with SOAR/IAM/SIEM and authoritative sources to embed controls and telemetry by design.

3. Integrations & Connectors

  • Engineer CPM/PSM connectors and Conjur integrations with operating systems, databases, middleware, cloud, and enterprise applications; reduce dual‑controlled IDs by expanding platform coverage.

  • Build SDK/API‑based onboarding toolkits and self‑service blueprints for application teams.

4. Architecture & Design Assurance

  • Define PAM reference architectures, secure configuration baselines, and performance standards for EPV/Conjur and their dependencies.

  • Conduct design reviews and proofs‑of‑concept; provide L3 engineering guidance to PID Admin and Tech Support.

5. Data, Telemetry & Reliability Enablement

  • Partner with Tech Support to improve observability (structured logs, metrics, traces) and SLOs; instrument automation to verify upgrades and releases.

  • Enable analytics‑ready outputs to support Governance dashboards and continuous control monitoring.

6. Cross‑Team Collaboration

  • With PAM Tech Support: hand over engineered changes with runbooks and tests; support complex incident root‑cause analysis as L3 engineer.

  • With Privilege Identity Admin: streamline T+1 onboarding (tooling, discovery feeds, templates) and reduce onboarding lead time via automation.

  • With PAM Governance: embed controls into designs; provide engineering evidence for control assurance and reviews.

Who you are

  • Diploma or Degree in IT, Cybersecurity, Computer Science, or related fields.

Experience

  • Minimum 7 years’ experience in PAM technical support, cybersecurity/platform engineering with 3–5+ years focused on CyberArk EPV and/or Conjur engineering (design, integrations, automation).

Technical Knowledge

  • Deep knowledge of EPV components (Vault, PVWA, CPM, PSM, PTA) and Conjur (cluster design, authn‑k8s/cloud, policy models).

  • Strong automation/IaC (PowerShell, Python, Ansible, Terraform) and CI/CD (e.g., Azure DevOps, GitLab, Jenkins).

  • Proven connector engineering for CPM/PSM and API/SDK‑based integrations with operating systems, databases, middleware, and cloud.

  • Solid grounding in secure design, secrets‑management patterns, and performance engineering.

Skills

  • Architecture‑level problem solving; ability to influence across Infrastructure, Cloud, and Application teams.

  • Clear documentation and knowledge transfer (blueprints, design standards, runbooks).

  • Independent, resourceful, and able to operate in a regulated environment.

  • Strong stakeholder management and collaboration

Certifications (Preferred)

  • CyberArk Sentry, Guardian (engineering/architect).

  • CISSP/CCSP or equivalent.

Who we are
As Singapore’s longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires.

Today, we’re on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation.
But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia’s leading financial services partner for a sustainable future.

We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career. Your Opportunity Starts Here.

What we offer
Competitive base salary. A suite of holistic, flexible benefits to suit every lifestyle. Community initiatives. Industry-leading learning and professional development opportunities. Equal opportunity. Fair employment. Selection based on ability and fit with our culture and values. Your wellbeing, growth and aspirations are every bit as cared for as the needs of our customers.

What we offer:

Competitive base salary. A suite of holistic, flexible benefits to suit every lifestyle. Community initiatives. Industry-leading learning and professional development opportunities. Your wellbeing, growth and aspirations are every bit as cared for as the needs of our customers.

JR00005315

Tagged as:

About OCBC Bank

OCBC is the longest established Singapore bank, formed in 1932 from the merger of three local banks, the oldest of which was founded in 1912. It is now the second largest financial services group in Southeast Asia by assets and one of the world’s most highly-rated banks, with an Aa1 rating from Moody’s. Recognised for its financial strength and stability, OCBC is consistently ranked among the World’s Top 50 Safest Banks by Global Finance and has been named Best Managed Bank in Singapore by The Asian Banker.

OCBC and its subsidiaries offer a broad array of commercial banking, specialist financial and wealth management services, ranging from consumer, corporate, investment, private and transaction banking to treasury, insurance, asset management and stockbroking services.

OCBC’s key markets are Singapore, Malaysia, Indonesia and Greater China. It has more than 570 branches and representative offices in 19 countries and regions. These include about 300 branches and offices in Indonesia under subsidiary Bank OCBC NISP, and over 90 branches and offices in Mainland China, Hong Kong SAR and Macau SAR under OCBC Wing Hang.

OCBC’s private banking services are provided by its wholly-owned subsidiary Bank of Singapore, which operates on a unique open-architecture product platform to source for the best-in-class products to meet its clients’ goals.

OCBC's insurance subsidiary, Great Eastern Holdings, is the oldest and most established life insurance group in Singapore and Malaysia. Its asset management subsidiary, Lion Global Investors, is one of the largest private sector asset management companies in Southeast Asia.