Remote CyberArk PAM Engineer / Architect

WaveStrong, Inc.; Dallas (TX); Remote; USD 124,000 - 207,000; Full time

Job summary

WaveStrong, Inc. is seeking a Remote CyberArk PAM Engineer/Architect for a 6-month contract to deploy CyberArk Secrets Manager and integrate it into the existing PAM/Vault ecosystem without redesigning the current vault architecture.

The role emphasizes hands-on CyberArk expertise, RBAC, policy management, credential rotation, safes, CPM, and secret retrieval workflows, plus HA/DR configurations, TLS/certificates, and audit logging. Remote in Central Time Zone.

Qualifications

• Hands-on CyberArk PAM/Vault experience with integrations.
• Experience deploying CyberArk Secrets Manager and configuring RBAC, policies, rotation, safes, CPM, and secret retrieval workflows.
• Knowledge of high availability (HA) and disaster recovery (DR) configurations.
• TLS/certificate implementation and audit logging.
• Experience with OpenShift/Kubernetes and DevSecOps integration of secret management.
• Ability to manage service accounts, namespaces, workloads identities, manifests; support GitLab CI/CD secret injection and runtime secret retrieval.
• Implement secure application onboarding patterns and understand container security and automation pipelines.

Skills

CyberArk PAM/Vault integrations

CyberArk Secrets Manager deployment

RBAC and policy management

HA/DR configurations

TLS/certificates & audit logging

OpenShift/Kubernetes & DevSecOps

GitLab CI/CD secret injection

Secret lifecycle & rotation workflows

Container security & automation

Job description

Exciting Remote CyberArk PAM Engineer/Architect, 6 months, contract opportunity.

The project is centered on deploying CyberArk Secrets Manager and integrating it into the existing PAM/Vault ecosystem without redesigning the current vault architecture. Strong product experience is essential to avoid delays and misconfigurations.

CyberArk PAM and Secrets Manager Expertise – candidate to work Central Time Zone.
Candidates should have hands-on experience with:

• CyberArk PAM/Vault and integrations
• CyberArk Secrets Manager deployment and configuration, RBAC, policy management, credential rotation, safes, CPM, and secret retrieval workflows
• High availability (HA) and disaster recovery (DR) configurations
• TLS/certificate implementation and audit logging

OpenShift / Kubernetes and DevSecOps Integration Skills should be capable of:

• Integrating Secrets Manager with OpenShift of:
• Integrating Secrets Manager with OpenShift/Kubernetes workloads
• Managing service accounts, namespaces, workload identities, and manifests
• Supporting GitLab CI/CD secret injection and runtime secret retrieval
• Implementing secure application onboarding patterns
• Understanding container security and automation pipelines