Remote CyberArk PAM Engineer / Architect

WaveStrong; United States; Remote; USD 120,000 - 180,000; Part time

Job summary

WaveStrong is seeking a remote CyberArk PAM Engineer/Architect for a 6-month contract to deploy CyberArk Secrets Manager and integrate it into the existing PAM/Vault ecosystem without redesigning the current vault architecture.

The ideal candidate has hands-on CyberArk PAM/Vault experience, Secrets Manager deployment and RBAC, policy management, credential rotation, and solid OpenShift/Kubernetes DevSecOps integration skills, with work in the Central Time Zone.

Qualifications

• Hands-on CyberArk PAM/Vault expertise with Secrets Manager deployment and RBAC control.
• Experience configuring policy management, credential rotation, safes, CPM, and secret retrieval workflows.
• Ability to designHA/DR configurations and implement TLS/certificates and audit logging.

Responsibilities

• Deploy CyberArk Secrets Manager and integrate it into the existing PAM/Vault ecosystem without redesigning the current vault architecture.
• Integrate Secrets Manager with OpenShift/Kubernetes workloads and manage service accounts, namespaces, and workload identities.
• Support GitLab CI/CD secret injection and runtime secret retrieval, and implement secure application onboarding patterns.

Skills

CyberArk PAM/Vault

Secrets Manager

RBAC

Policy management

Credential rotation

High availability

Disaster recovery

TLS/certificates

Audit logging

OpenShift

Kubernetes

DevSecOps integration

GitLab CI/CD

Container security

Automation pipelines

Tools

GitLab CI/CD

OpenShift

Kubernetes

Job description

Exciting Remote CyberArk PAM Engineer/Architect, 6 months, contract opportunity.

Requirements

The project is centered on deploying CyberArk Secrets Manager and integrating it into the existing PAM/Vault ecosystem without redesigning the current vault architecture. Strong product experience is essential to avoid delays and misconfigurations. CyberArk PAM and Secrets Manager Expertise – candidate to work Central Time Zone.

Candidates should have hands-on experience with:

• CyberArk PAM/Vault and integrations
• CyberArk Secrets Manager deployment and configuration, RBAC, policy management, credential rotation, safes, CPM, and secret retrieval workflows
• High availability (HA) and disaster recovery (DR) configurations
• TLS/certificate implementation and audit logging

OpenShift / Kubernetes and DevSecOps Integration Skills should be capable of:

• Integrating Secrets Manager with OpenShift of:
• Integrating Secrets Manager with OpenShift/Kubernetes workloads
• Managing service accounts, namespaces, workload identities, and manifests
• Supporting GitLab CI/CD secret injection and runtime secret retrieval
• Implementing secure application onboarding patterns
• Understanding container security and automation pipelines