{"id":2122508,"url":"https://alion.io/job/fujitsu-security-engineer","title":"Security Engineer","company":{"id":896,"name":"Fujitsu","domain":"fujitsu.com","url":"https://alion.io/company/fujitsu-poland-sp-z-o-o","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"CyberArk","optional":false},{"name":"IAM","optional":false},{"name":"IBM QRadar","optional":false},{"name":"ITSM","optional":false},{"name":"LDAP","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PKI","optional":false},{"name":"ServiceNow","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"VPN","optional":false},{"name":"Windows Server","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-09T00:04:58Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-10-11T19:42:35Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"The Security Engineer is mainly responsible for the end-to-end implementation, integration, and operationalization of CyberArk (On-Prem and Cloud) Privileged Access Management (PAM), Venafi Machine Identity Management and 2FA (such as RSA, SecurEnvoy, Cisco Duo) solutions across enterprise environments. This role focuses on deployment, migration, onboarding, and integration of privileged access controls, certificates, and machine identities in line with security best practices.\nThe Security Engineer will work closely with architects, project managers, and customer stakeholders to deliver secure, scalable, and compliant PAM, CLM and 2FA solutions.\nKey Responsibilities\n1. CyberArk Deployment & Implementation\nInstall, configure, and harden CyberArk components:Enterprise Password Vault (EPV)\nCentral Policy Manager (CPM)\nPrivileged Session Manager (PSM)\nPassword Vault Web Access (PVWA)\nPrivileged Threat Analytics (PTA)\nPrivilege Cloud Connector\nCyberArk Adaptive Multi-Factor Authentication (MFA)\nCyberArk Vendor Privileged Access Manager (Vendor PAM)\n\nInstall, configure 2FA solutions such as RSA, SecurEnvoy, Cisco Duo\nDevelop and Maintain PSM and CPM connectors\nExecute full-cycle deployment activities:Infrastructure build\nInstallation & configuration\nSystem validation and testing\n\nEnsure adherence to CyberArk as well as RSA/SecurEnvoy best practices for installation, configuration, and testing\n2. Venafi Deployment & Machine Identity Management\nInstall, configure, and administer Venafi TLS Protect platform.\nDesign and document Venafi architecture.\nConfigure machine identity lifecycle management.\nImplement:Certificate discovery\nCertificate inventory management\nCertificate automation workflows\nCA integrations\n\nEnable:Automated certificate issuance\nAutomated renewal\nCertificate revocation processes\nSelf-service certificate requests\n\nConfigure network discovery and certificate intelligence capabilities.\nMonitor certificate compliance and certificate expiry risks.\n3. Migration & Upgrade Activities\nPerform CyberArk environment migrations (on-prem to on-prem / cloud / SaaS)\nExecute version upgrades and platform transitions (e.g., legacy OS to modern OS)\nHandle:Vault data migration\nCutover planning and execution\n\nSupport post-migration stabilization and user acceptance testing\n4. Account Onboarding & Policy Management\nOnboard privileged accounts, systems, and applications into CyberArk\nConfigure:Password policies\nRotation and reconciliation settings\nAccess controls and role-based permissions\n\nDefine and implement operational procedures (e.g., break-glass access, onboarding workflows)\n5. Integration with Enterprise Systems\nIntegrate CyberArk with:SIEM, ITSM, IAM platforms\nEndpoint and network security tools\n\nEnable session recording, monitoring, and audit logging across systems\n6. Integration & Automation\nIntegrate CyberArk and Venafi with:\nActive Directory / LDAP\nEntra ID\nSIEM platforms\nSplunk\nQRadar\nITSM platforms\nServiceNow\nIdentity and Access Management systems\nSecurity monitoring platforms\nCertificate Authorities\nMicrosoft CA\nDigiCert\nEntrust\nGlobalSign\n7. PAM Architecture & Design Support\nSupport solution architects in:Gathering requirements\nReviewing technical architecture\nConducting technical workshops and design validation\n\nContribute to architecture documentation and solution design reviews\n8. Operations Readiness & Knowledge Transfer\nDevelop and document:Runbooks\nSOPs\nOperational procedures\n\nConduct knowledge transfer sessions for operations teams\nEnsure readiness for ongoing PAM operations and support\n9. Troubleshooting & Support\nProvide L2/L3 support for CyberArk PAM, Venafi and MFA platform issues\nCertificate lifecycle failures\nDiscovery issues\nRenewal failures\nCA integration issues\nPatch Management\nAutomation workflow failures\nPerform root cause analysis for:Access issues\nPassword rotation failures\nSession management failures\n\nWork with vendors and internal teams to resolve incidents\nTechnical Skill Requirements:\nMandatory\nCyberArk Certified Delivery Engineer (CDE-PAM / Privilege Cloud)\nStrong hands-on deployment experience with:\nEPV, CPM, PSM, PVWA, PTA, Privilege Cloud Connector, CyberArk Vendor Privileged Access Manager (Vendor PAM), Cyberark MFA, RSA Authentication Manager, SecurEnvoy\nSolid understanding of:\nWindows Server & Linux (RHEL)\nActive Directory / LDAP\nNetworking (firewalls, ports, VPN)\nScripting\nKnowledge in IAM, Security Best Practices and Zero Trust Methodologies\nPreferred\nExperience in large-scale enterprise deployments (500+ systems onboarding)\nVenafi TLS Protect Certification\nVenafi Machine Identity Management Certification\nFamiliarity with:\nDevOps secrets (e.g., Conjur)\nCloud PAM (CyberArk Privilege Cloud)\nStrong Expertise in PSM and CPM connector developments\nExperience with PKI and certificate lifecycle management\nTLS Protect\nCertificate Lifecycle Management\nDiscovery & Monitoring\nMachine Identity Management\nCertificate Authority Integrations\nVenafi\nTLS Protect\nCertificate Lifecycle Management\nDiscovery & Monitoring\nMachine Identity Management\nCertificate Authority Integrations\nIntegration experience with:\nSplunk / QRadar other SIEMs\nServiceNow\nMFA solutions\nSoft Skills & Competencies\nStrong stakeholder engagement & communication skills\nAbility to lead technical workshops and discussions\nStructured and documentation-driven mindset\nExperience working in project-based delivery environments\nTypical Deliverables\nCyberArk deployment build (Vault, CPM, PSM, PVWA, PTA, CyberArk Cloud, Vendor PAM, MFA)\nMigration and upgrade runbooks\nSystem onboarding documentation\nSOPs and operational guides\nIntegration configuration documents\nVenafi TLS Protect implementation.\nCertificate discovery and automation setup\n#ASEAN1_Priority","description_format":"text","description_chars":5740,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","Systems Integrators","High-Performance Computing"],"lifecycle":[{"event":"open","at":"2026-10-09T00:04:58Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":14,"reasons":["conf:7","velocity","win:early","comp:brand"],"computed_at":"2026-10-10T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/fujitsu-security-engineer","json_url":"https://alion.io/job/fujitsu-security-engineer.json","meta":{"generated_at":"2026-10-11T23:08:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13690,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":896},"rest":"https://alion.io/mcp/rest/get_company?id=896"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffujitsu-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffujitsu-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffujitsu-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/fujitsu-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffujitsu-security-engineer"}]}