CyberArk Architect-Secrets Manager / Conjur (Contract)

KeyData Cyber; United States; Remote; USD 130,000 - 210,000; Full time

Job summary

KeyData Cyber, a leading IAM professional services firm, seeks a CyberArk Architect- Secrets Manager / Conjur for PAM and secrets management. You will design, implement, and advise on enterprise PAM, Secrets Manager, and Conjur On-Prem across DevSecOps workflows, OpenShift/Kubernetes, and GitLab CI/CD integrations.

With extensive experience, you will guide security architecture, RBAC policies, and credential rotation while collaborating with delivery teams and clients nationwide.

Qualifications

• 8+ years of PAM, cybersecurity, or security architecture experience.
• Strong knowledge of CyberArk PAM/Vault and CyberArk Secrets Manager.
• Experience with Conjur On-Prem deployment and integration.
• Experience integrating secrets management with OpenShift/Kubernetes and GitLab CI/CD.
• Strong knowledge of RBAC, credential rotation, and secret retrieval.

Responsibilities

• Design and implement enterprise CyberArk PAM, Secrets Manager, and Conjur On-Prem solutions.
• Integrate Secrets Manager/Conjur with existing CyberArk PAM/Vault environments without redesigning the current vault architecture.
• Define PAM and secrets management architecture, security controls, access models, and implementation roadmaps.
• Configure RBAC, policies, credential rotation, Safes, CPM, and secret retrieval workflows.
• Integrate Secrets Manager/Conjur with OpenShift/Kubernetes workloads, including service accounts, namespaces, workload identities, and manifests.
• Support GitLab CI/CD secret injection and runtime secret retrieval.
• Design and implement HA/DR, TLS/certificates, audit logging, backup/recovery, and monitoring.
• Develop secure application onboarding and secret management patterns.
• Work with infrastructure and security teams across networking, DNS, firewalls, load balancers, Linux/server environments, and enterprise authentication.
• Lead technical discussions, troubleshoot complex issues, and provide guidance to engineers and clients.

Skills

PAM expertise

Security architecture

RBAC

Credential rotation

Cryptography basics

Troubleshooting

Client-facing skills

Independent work

Education

Bachelor's or Master’s Degree in Computer Science, Computer Engineering, MIS, Cybersecurity, or equivalent experience

Tools

CyberArk PAM/Vault

CyberArk Secrets Manager

Conjur On-Prem

OpenShift/Kubernetes

GitLab CI/CD

Job description

At KeyData Cyber, we’re shaping the future of identity security. Recognized by Gartner and KuppingerCole as a leading IAM professional services firm, we specialize exclusively in designing, deploying, and managing end-to-end Identity and Access Management programs for organizations across North America.

With 20years of experience, 50M+ identities managed, and 1,000+ successful deployments, our team is our strongest asset and is built by design to help clients protect critical infrastructure, enable digital transformation, and ensure compliance with confidence.

We deliver comprehensive solutions across IAM domains, including:

• Workforce IAM (Access Management, Identity Governance and Administration, Privileged Access Management)
• Consumer IAM (Identity Verification, Authentication and Access, Threat Detection) in highly regulated industries.

If you’re ready to grow your career alongside some of the industry’s best, come join us — you’re key to our success

As a CyberArk Architect- Secrets Manager / Conjur, You will be a key member of our Delivery Services Team, responsible for designing, implementing, and advising on enterprise Privileged Access Management (PAM) and secrets management solutions. This role focuses on CyberArk PAM, Secrets Manager, and Conjur On-Prem, including integration with existing CyberArk Vault environments and modern DevSecOps platforms.

Location: USA, remote

Employment Type: Contract, Immediate Start through March 2027

What You’ll Do:

• Design and implement enterprise CyberArk PAM, Secrets Manager, and Conjur On-Prem solutions.
• Integrate Secrets Manager/Conjur with existing CyberArk PAM/Vault environments without redesigning the current vault architecture.
• Define PAM and secrets management architecture, security controls, access models, and implementation roadmaps.
• Configure RBAC, policies, credential rotation, Safes, CPM, and secret retrieval workflows.
• Integrate Secrets Manager/Conjur with OpenShift/Kubernetes workloads, including service accounts, namespaces, workload identities, and manifests.
• Support GitLab CI/CD secret injection and runtime secret retrieval.
• Design and implement HA/DR, TLS/certificates, audit logging, backup/recovery, and monitoring.
• Develop secure application onboarding and secret management patterns.
• Work with infrastructure and security teams across networking, DNS, firewalls, load balancers, Linux/server environments, and enterprise authentication.
• Lead technical discussions, troubleshoot complex issues, and provide guidance to engineers and clients.

Who We’re Looking For:

• 8+ years of experience in PAM, cybersecurity, identity, or security architecture.
• Bachelor’s or Master’s Degree in Computer Science, Computer Engineering, Management Information Systems, Cybersecurity, or equivalent experience
• Strong hands-on experience with CyberArk PAM/Vault and CyberArk Secrets Manager.
• Experience with Conjur On-Prem deployment, configuration, and integration.
• Experience integrating secrets management with OpenShift/Kubernetes and GitLab CI/CD.
• Strong knowledge of RBAC, credential rotation, Safes, CPM, policies, secret retrieval, and privileged access controls.
• Experience with HA/DR, TLS/certificates, audit logging, networking, and security hardening.
• Strong troubleshooting, communication, and client-facing skills.
• Ability to design solutions while working independently and collaboratively

Preferred Qualifications:

• CyberArk Sentry – Secrets Manager (SECRET-SEN) or CyberArk CDE – Secrets certification is strongly preferred.
• Additional CyberArk certifications, such as CDE – PAM, Sentry PAM, or Defender.
• DevSecOps, APIs, automation, Infrastructure as Code, and CI/CD experience.
• Experience with container security and automated application onboarding.
• Knowledge of security/compliance frameworks and vulnerability management.
• Programming/scripting experience such as Python, Java, or PowerShell. #LI-RJ1

Why You’ll Love Working Here

At KeyData Cyber, we put people first, valuing learning, growth, and work-life balance. We offer extensive opportunities to advance your career through leading digital identity projects across North America. Our culture is built on respect, inclusion, and equal opportunity for everyone.

Accessibility & Accommodations

If you require accommodation due to a disability at any time during the recruitment and/or assessment process, please contact Talent Acquisition, and we will make all reasonable efforts to accommodate your request.

Fraud Prevention & Identity Verification

We may use information provided during the application process to help prevent fraud and verify identity. These checks may be conducted automatically through trusted third‑party service providers as part of our standard application screening process.