Remote CyberArk PAM Engineer / Architect

WaveStrong; Dallas, Northern (TX, KY); Hybrid; USD 90,000 - 150,000; Full time

Job summary

WaveStrong is seeking a Remote CyberArk PAM Engineer/Architect for a 6-month contract to deploy CyberArk Secrets Manager and integrate it into the existing PAM/Vault ecosystem without redesigning the current vault. Strong product experience is essential to avoid delays and misconfigurations.

Ideal candidates will have hands-on CyberArk PAM/Vault, Secrets Manager deployment expertise, and a solid background in HA/DR, TLS, audit logging, OpenShift, Kubernetes, and GitLab CI/CD secret injection.

Qualifications

• Hands-on CyberArk PAM/Vault experience required.
• Secrets Manager deployment with RBAC, policy mgmt, credential rotation needed.
• HA/DR configurations knowledge and TLS/audit logging skills expected.

Responsibilities

• Deploy CyberArk Secrets Manager and integrate into PAM/Vault ecosystem.
• Ensure secure secret retrieval workflows and RBAC/policy management.
• Integrate Secrets Manager with OpenShift and Kubernetes workloads.
• Support GitLab CI/CD secret injection and runtime secret retrieval.
• Implement secure onboarding patterns and container security practices.

Skills

CyberArk PAM

CyberArk Secrets Manager

HA/DR

TLS certificates

Audit logging

OpenShift

Kubernetes

DevSecOps

Secret injection

Runtime secret retrieval

Service accounts

Namespaces

Workload identities

GitLab CI/CD

Container security

Automation pipelines

Job description

Exciting Remote CyberArk PAM Engineer/Architect, 6 months, contract opportunity.

The project is centered on deploying CyberArk Secrets Manager and integrating it into the existing PAM/Vault ecosystem without redesigning the current vault architecture. Strong product experience is essential to avoid delays and misconfigurations.

CyberArk PAM and Secrets Manager Expertise – candidate to work Central Time Zone.
Candidates should have hands-on experience with:

• CyberArk PAM/Vault and integrations
• CyberArk Secrets Manager deployment and configuration, RBAC, policy management, credential rotation, safes, CPM, and secret retrieval workflows
• High availability (HA) and disaster recovery (DR) configurations
• TLS/certificate implementation and audit logging

OpenShift / Kubernetes and DevSecOps Integration Skills should be capable of:

• Integrating Secrets Manager with OpenShift of:
• Integrating Secrets Manager with OpenShift/Kubernetes workloads
• Managing service accounts, namespaces, workload identities, and manifests
• Supporting GitLab CI/CD secret injection and runtime secret retrieval
• Implementing secure application onboarding patterns
• Understanding container security and automation pipelines