Remote CyberArk PAM Architect — Secrets & OpenShift

WaveStrong, Inc.; Dallas (TX); Remote; USD 124,000 - 207,000; Full time

Job summary

WaveStrong, Inc. is seeking a Remote CyberArk PAM Engineer/Architect for a 6-month contract to deploy CyberArk Secrets Manager and integrate it into the existing PAM/Vault ecosystem without redesigning the current vault architecture.

The role emphasizes hands-on CyberArk expertise, RBAC, policy management, credential rotation, safes, CPM, and secret retrieval workflows, plus HA/DR configurations, TLS/certificates, and audit logging. Remote in Central Time Zone.

Qualifications

• Hands-on CyberArk PAM/Vault experience with integrations.
• Experience deploying CyberArk Secrets Manager and configuring RBAC, policies, rotation, safes, CPM, and secret retrieval workflows.
• Knowledge of high availability (HA) and disaster recovery (DR) configurations.
• TLS/certificate implementation and audit logging.
• Experience with OpenShift/Kubernetes and DevSecOps integration of secret management.
• Ability to manage service accounts, namespaces, workloads identities, manifests; support GitLab CI/CD secret injection and runtime secret retrieval.
• Implement secure application onboarding patterns and understand container security and automation pipelines.

Skills

CyberArk PAM/Vault integrations

CyberArk Secrets Manager deployment

RBAC and policy management

HA/DR configurations

TLS/certificates & audit logging

OpenShift/Kubernetes & DevSecOps

GitLab CI/CD secret injection

Secret lifecycle & rotation workflows

Container security & automation

Job description

WaveStrong, Inc. is seeking a Remote CyberArk PAM Engineer/Architect for a 6-month contract to deploy CyberArk Secrets Manager and integrate it into the existing PAM/Vault ecosystem without redesigning the current vault architecture.

The role emphasizes hands-on CyberArk expertise, RBAC, policy management, credential rotation, safes, CPM, and secret retrieval workflows, plus HA/DR configurations, TLS/certificates, and audit logging. Remote in Central Time Zone.