CyberArk Engineer – Secrets Manager / Conjur

KeyData Cyber; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

KeyData Cyber is seeking a CyberArk Engineer-Secrets Manager / Conjur to lead hands-on PAM and secrets management delivery for enterprise environments in North America. You will design, configure, and support CyberArk PAM, Secrets Manager, and Conjur On-Prem, integrating with Vaults and OpenShift/Kubernetes workloads.

The role is remote in the USA as a contract position with an immediate start through March 2027.

Qualifications

• 5+ years of experience in PAM, cybersecurity, identity, or security engineering.
• Strong hands-on experience with CyberArk PAM/Vault and CyberArk Secrets Manager.
• Experience with Conjur On-Prem deployment, configuration, and integration.
• Experience integrating secrets management with OpenShift/Kubernetes and GitLab CI/CD.
• Solid working knowledge of RBAC, credential rotation, Safes, CPM, policies, secret retrieval, and privileged access controls.
• Experience with HA/DR, TLS/certificates, audit logging, networking, and security hardening.
• Strong troubleshooting, documentation, and communication skills.
• Ability to work independently on assigned tasks and collaboratively within a delivery team.

Responsibilities

• Design, configure, and maintain CyberArk PAM, Secrets Manager, and Conjur On-Prem environments.
• Integrate Secrets Manager/Conjur with existing CyberArk PAM/Vault environments in alignment with the established vault architecture.
• Implement PAM and secrets management configurations based on defined architecture, security controls, and access models.
• Configure and manage RBAC, policies, credential rotation, Safes, CPM, and secret retrieval workflows.
• Integrate Secrets Manager/Conjur with OpenShift/Kubernetes workloads, including service accounts, namespaces, workload identities, and manifests.
• Implement GitLab CI/CD secret injection and runtime secret retrieval.
• Build and support HA/DR, TLS/certificates, audit logging, backup/recovery, and monitoring configurations.
• Onboard applications and implement secure secret management patterns.
• Collaborate with infrastructure and security teams across networking, DNS, firewalls, load balancers, Linux/server environments, and enterprise authentication.
• Troubleshoot and resolve technical issues, document configurations, and support architects and clients throughout implementation.

Skills

PAM

CyberArk PAM/Vault

CyberArk Secrets Manager

Conjur On-Prem

OpenShift/Kubernetes

GitLab CI/CD

RBAC & policy management

Secret rotation

HA/DR & TLS

Troubleshooting & documentation

Tools

CyberArk PAM/Vault

CyberArk Secrets Manager

Conjur On-Prem

OpenShift

Kubernetes

GitLab CI/CD

Job description

At KeyData Cyber, we’re shaping the future of identity security. Recognized by Gartner and KuppingerCole as a leading IAM professional services firm, we specialize exclusively in designing, deploying, and managing end-to-end Identity and Access Management programs for organizations across North America.

With 20years of experience, 50M+ identities managed, and 1,000+ successful deployments, our team is our strongest asset and is built by design to help clients protect critical infrastructure, enable digital transformation, and ensure compliance with confidence.

We deliver comprehensive solutions across IAM domains, including:

• Workforce IAM (Access Management, Identity Governance and Administration, Privileged Access Management)
• Consumer IAM (Identity Verification, Authentication and Access, Threat Detection) in highly regulated industries.

If you’re ready to grow your career alongside some of the industry’s best, come join us — you’re key to our success

As a CyberArk Engineer-Secrets Manager / Conjur , You will be a key member of our Delivery Services Team, responsible for implementing, configuring, and supporting enterprise Privileged Access Management (PAM) and secrets management solutions. This role focuses on hands‑on delivery of CyberArk PAM, Secrets Manager, and Conjur On-Prem, including integration with existing CyberArk Vault environments and modern DevSecOps platforms.

Location: USA, Remote

Employment Type: Contract, Immediate Start through March 2027

What You’ll Do:

• Design, configure, and maintain CyberArk PAM, Secrets Manager, and Conjur On-Prem environments.
• Integrate Secrets Manager/Conjur with existing CyberArk PAM/Vault environments in alignment with the established vault architecture.
• Implement PAM and secrets management configurations based on defined architecture, security controls, and access models.
• Configure and manage RBAC, policies, credential rotation, Safes, CPM, and secret retrieval workflows.
• Integrate Secrets Manager/Conjur with OpenShift/Kubernetes workloads, including service accounts, namespaces, workload identities, and manifests.
• Implement GitLab CI/CD secret injection and runtime secret retrieval.
• Build and support HA/DR, TLS/certificates, audit logging, backup/recovery, and monitoring configurations.
• Onboard applications and implement secure secret management patterns.
• Collaborate with infrastructure and security teams across networking, DNS, firewalls, load balancers, Linux/server environments, and enterprise authentication.
• Troubleshoot and resolve technical issues, document configurations, and support architects and clients throughout implementation.

WhoWe’re Looking For:

• 5+ years of experience in PAM, cybersecurity, identity, or security engineering.
• Strong hands‑on experience with CyberArk PAM/Vault and CyberArk Secrets Manager.
• Experience with Conjur On‑Prem deployment, configuration, and integration.
• Experience integrating secrets management with OpenShift/Kubernetes and GitLab CI/CD.
• Solid working knowledge of RBAC, credential rotation, Safes, CPM, policies, secret retrieval, and privileged access controls.
• Experience with HA/DR, TLS/certificates, audit logging, networking, and security hardening.
• Strong troubleshooting, documentation, and communication skills.
• Ability to work independently on assigned tasks and collaboratively within a delivery team.

Nice-to-Have Skills:

• CyberArk Sentry – Secrets Manager (SECRET-SEN) or CyberArk CDE – Secrets certification is strongly preferred.
• Additional CyberArk certifications, such as Defender, Sentry PAM, or CDE – PAM.
• DevSecOps, APIs, automation, Infrastructure as Code, and CI/CD experience.
• Experience with container security and automated application onboarding.
• Familiarity with security/compliance frameworks and vulnerability management.
• Programming/scripting experience such as Python, Bash, or PowerShell. #LI-RR1

Why You’ll Love Working Here

At KeyData Cyber, we put people first, valuing learning, growth, and work‑life balance. We offer extensive opportunities to advance your career through leading digital identity projects across North America. Our culture is built on respect, inclusion, and equal opportunity for everyone.

Accessibility & Accommodations

If you require accommodation due to a disability at any time during the recruitment and/or assessment process, please contact Talent Acquisition, and we will make all reasonable efforts to accommodate your request.

Fraud Prevention & Identity Verification

We may use information provided during the application process to help prevent fraud and verify identity. These checks may be conducted automatically through trusted third‑party service providers as part of our standard application screening process.