CyberArk PAM and Secrets Manager

Experis Technology Group; Dallas (TX); Remote; USD 124,000 - 193,000; Full time

Job summary

ManpowerGroup's client is seeking a CyberArk PAM and Secrets Manager specialist to join their security team. The role focuses on deploying CyberArk Secrets Manager and integrating it with the existing PAM/Vault ecosystem without redesigning the vault.

You will configure RBAC, policy management, credential rotation, safes, and ensure HA/DR, TLS, and audit logging are properly implemented. Remote work option for Dallas-area or similar work arrangements may apply.

Qualifications

• Hands-on experience with CyberArk PAM/Vault and Secrets Manager deployment and configuration.
• Knowledge of RBAC, policy management, credential rotation, safes, CPM, and secret workflows.
• Experience configuring HA and DR for CyberArk components.
• Understanding TLS/certificate implementation and audit logging practices.
• Ability to integrate Secrets Manager with OpenShift/Kubernetes and DevSecOps workflows.

Responsibilities

• Deploy CyberArk Secrets Manager and integrate it into the existing PAM/Vault ecosystem without redesigning the vault.
• Configure and support CyberArk PAM/Vault and Secrets Manager capabilities, including RBAC, policy management, credential rotation, safes, CPM, and secret retrieval workflows.
• Implement and validate high availability (HA) and disaster recovery (DR) configurations.
• Deliver secure TLS/certificate implementation and ensure audit logging is correctly configured for traceability and compliance.
• Integrate Secrets Manager with OpenShift/Kubernetes workloads and support secure onboarding patterns (service accounts, namespaces, workloads identities, manifests).

Skills

CyberArk PAM/Vault

Secrets Manager deployment

RBAC & policy management

Credential rotation

HA/DR configuration

TLS/certificate management

OpenShift/Kubernetes integration

GitLab CI/CD secret injection

Job description

Our client is seeking a CyberArk PAM and Secrets Manager to join their team. The ideal candidate will have strong hands-on product expertise, a security-first mindset, and the ability to integrate secrets management into cloud-native workflows—aligning successfully in the organization.

Job Title:CyberArk PAM and Secrets Manager

Location:Remote (Dallas, Texas)

Contract on W2

What's the Job?

• Deploy CyberArk Secrets Manager and integrate it into the existing CyberArk PAM/Vault ecosystem without redesigning the current vault architecture.
• Configure and support CyberArk PAM/Vault and Secrets Manager capabilities, including RBAC, policy management, credential rotation, safes, CPM, and secret retrieval workflows.
• Implement and validate high availability (HA) and disaster recovery (DR) configurations to support operational resilience.
• Deliver secure TLS/certificate implementation and ensure audit logging is correctly configured for traceability and compliance.
• Integrate Secrets Manager with OpenShift/Kubernetes workloads and support secure application onboarding patterns, including service accounts, namespaces, workload identities, and manifests.

What's Needed?

• Hands-on experience with CyberArk PAM/Vault and integrations, including Secrets Manager deployment and configuration.
• Proven knowledge of RBAC, policy management, credential rotation, safes, CPM, and secret retrieval workflows.
• Experience configuring HA and DR for CyberArk components, with a focus on reliability and correct operational behavior.
• Strong understanding of TLS/certificate implementation and audit logging practices.
• Ability to integrate Secrets Manager with OpenShift/Kubernetes and DevSecOps workflows, including GitLab CI/CD secret injection and runtime secret retrieval.

What's in it for me?

• Work on a high-impact secrets management deployment that strengthens security and reduces misconfiguration risk.
• Collaborate on cloud-native integration patterns across OpenShift/Kubernetes and CI/CD pipelines.
• Apply deep CyberArk product expertise to real-world PAM and secrets management workflows.
• Contribute to secure onboarding of applications using service accounts, namespaces, and workload identities.
• Support operational readiness through HA/DR, monitoring/logging integration, and security hardening.

Upon completion of waiting period consultants are eligible for:

• Medical and Prescription Drug Plans
• Dental Plan
• Vision Plan
• Health Savings Account
• Health Flexible Spending Account
• Dependent Care Flexible Spending Account
• Supplemental Life Insurance
• Short Term and Long Term Disability Insurance
• Business Travel Insurance
• 401(k), Plus Match
• Weekly Pay

About ManpowerGroup, Parent Company of: Manpower, Experis, Talent Solutions, and Jefferson Wells.

ManpowerGroup® (NYSE: MAN), the leading global workforce solutions company, helps organizations transform in a fast-changing world of work by sourcing, assessing, developing, and managing the talent that enables them to win. We develop innovative solutions for hundreds of thousands of organizations every year, providing them with skilled talent while finding meaningful, sustainable employment for millions of people across a wide range of industries and skills. Our expert family of brands – Manpower, Experis, Talent Solutions, and Jefferson Wells – creates substantial value for candidates and clients across more than 75 countries and territories and has done so for over 70 years. We are recognized consistently for our diversity - as a best place to work for Women, Inclusion, Equality and Disability and in 2023 ManpowerGroup was named one of the World's Most Ethical Companies for the 14th year - all confirming our position as the brand of choice for in-demand talent.