CyberArk Architect — Secrets Manager / Conjur

KeyData Associates Inc.; Toronto; Remote; CAD 165,000 - 262,000; Full time

Benefits offered by this job

Remote work

Job summary

Go Fractional is seeking a CyberArk Architect to design, implement, and advise on enterprise PAM and secrets management. You will work on CyberArk PAM/Vault, Secrets Manager, and Conjur On-Prem, integrating with existing vault environments and DevSecOps platforms.

Location is remote with a contract through March 2027. You’ll collaborate with Delivery Services and security teams to define architecture, RBAC, rotation policies, and secure workflows across OpenShift/Kubernetes, CI/CD pipelines, and

Qualifications

• 8+ years of experience in PAM, cybersecurity, identity, or security architecture.
• Bachelor’s or Master’s Degree in Computer Science, Computer Engineering, MIS, Cybersecurity, or equivalent experience.
• Strong hands-on experience with CyberArk PAM/Vault and CyberArk Secrets Manager.
• Experience with Conjur On-Prem deployment, configuration, and integration.
• Experience integrating secrets management with OpenShift/Kubernetes and GitLab CI/CD.
• Strong knowledge of RBAC, credential rotation, Safes, CPM, policies, secret retrieval, and privileged access controls.
• Experience with HA/DR, TLS/certificates, audit logging, networking, and security hardening.
• Strong troubleshooting, communication, and client-facing skills.
• Ability to design solutions while working independently and collaboratively

Responsibilities

• Design and implement enterprise CyberArk PAM, Secrets Manager, and Conjur On-Prem solutions.
• Integrate Secrets Manager/Conjur with existing CyberArk PAM/Vault environments without redesigning the current vault architecture.
• Define PAM and secrets management architecture, security controls, access models, and implementation roadmaps.
• Configure RBAC, policies, credential rotation, Safes, CPM, and secret retrieval workflows.
• Integrate Secrets Manager/Conjur with OpenShift/Kubernetes workloads, including service accounts, namespaces, workload identities, and manifests.
• Support GitLab CI/CD secret injection and runtime secret retrieval.
• Design and implement HA/DR, TLS/certificates, audit logging, backup/recovery, and monitoring.
• Develop secure application onboarding and secret management patterns.
• Work with infrastructure and security teams across networking, DNS, firewalls, load balancers, Linux/server environments, and enterprise authentication.
• Lead technical discussions, troubleshoot complex issues, and provide guidance to engineers and clients.

Skills

CyberArk PAM/Vault

CyberArk Secrets Manager

Conjur On-Prem deployment

OpenShift/Kubernetes

GitLab CI/CD

RBAC & credential rotation

HA/DR & TLS certificates

Scripting (Python/PowerShell/Java)

Troubleshooting & client-facing

Education

Bachelor’s or Master’s Degree in CS/CE/MIS/Cybersecurity

Tools

Conjur On-Prem tooling

OpenShift/Kubernetes tooling

Job description

As a CyberArk Architect- Secrets Manager / Conjur, You will be a key member of our Delivery Services Team, responsible for designing, implementing, and advising on enterprise Privileged Access Management (PAM) and secrets management solutions. This role focuses on CyberArk PAM, Secrets Manager, and Conjur On-Prem, including integration with existing CyberArk Vault environments and modern DevSecOps platforms.

Location: USA, remote

Employment Type: Contract, Immediate Start through March 2027

What You’ll Do:

• Design and implement enterprise CyberArk PAM, Secrets Manager, and Conjur On-Prem solutions.
• Integrate Secrets Manager/Conjur with existing CyberArk PAM/Vault environments without redesigning the current vault architecture.
• Define PAM and secrets management architecture, security controls, access models, and implementation roadmaps.
• Configure RBAC, policies, credential rotation, Safes, CPM, and secret retrieval workflows.
• Integrate Secrets Manager/Conjur with OpenShift/Kubernetes workloads, including service accounts, namespaces, workload identities, and manifests.
• Support GitLab CI/CD secret injection and runtime secret retrieval.
• Design and implement HA/DR, TLS/certificates, audit logging, backup/recovery, and monitoring.
• Develop secure application onboarding and secret management patterns.
• Work with infrastructure and security teams across networking, DNS, firewalls, load balancers, Linux/server environments, and enterprise authentication.
• Lead technical discussions, troubleshoot complex issues, and provide guidance to engineers and clients.

Who We’re Looking For:

• 8+ years of experience in PAM, cybersecurity, identity, or security architecture.
• Bachelor’s or Master’s Degree in Computer Science, Computer Engineering, Management Information Systems, Cybersecurity, or equivalent experience
• Strong hands‑on experience with CyberArk PAM/Vault and CyberArk Secrets Manager.
• Experience with Conjur On‑Prem deployment, configuration, and integration.
• Experience integrating secrets management with OpenShift/Kubernetes and GitLab CI/CD.
• Strong knowledge of RBAC, credential rotation, Safes, CPM, policies, secret retrieval, and privileged access controls.
• Experience with HA/DR, TLS/certificates, audit logging, networking, and security hardening.
• Strong troubleshooting, communication, and client‑facing skills.
• Ability to design solutions while working independently and collaboratively

Preferred Qualifications:

• CyberArk Sentry - Secrets Manager (SECRET-SEN) or CyberArk CDE - Secrets certification is strongly preferred.
• Additional CyberArk certifications, such as CDE - PAM, Sentry PAM, or Defender.
• DevSecOps, APIs, automation, Infrastructure as Code, and CI/CD experience.
• Experience with container security and automated application onboarding.
• Knowledge of security/compliance frameworks and vulnerability management.
• Programming/scripting experience such as Python, Java, or PowerShell.

Pre-Employment Screening: Engagement is contingent upon successful completion of background verification, drug screening, and motor vehicle records checks, in accordance with applicable laws. #LI-RJ1

Why You’ll Love Working Here

At KeyData Cyber, we put people first, valuing learning, growth, and work-life balance. We offer extensive opportunities to advance your career through leading digital identity projects across North America. Our culture is built on respect, inclusion, and equal opportunity for everyone.