Remote CyberArk PAM Engineer / Architect

WaveStrong, Inc.; United States; Remote; USD 110,000 - 165,000; Part time

Job summary

WaveStrong, Inc. is seeking a remote CyberArk PAM Engineer/Architect for a 6-month contract to deploy CyberArk Secrets Manager and integrate it into the existing PAM/Vault ecosystem without altering the vault architecture.

You will work in the Central Time Zone and collaborate across security, DevOps, and platform teams. The ideal candidate has hands-on CyberArk PAM/Vault, Secrets Manager deployment, RBAC and policy management, credential rotation, and experience with OpenShift/Kubernetes,

Qualifications

• Hands-on CyberArk PAM/Vault experience required.
• Experience deploying Secrets Manager and configuring RBAC/policy mgmt.
• Strong knowledge of HA/DR, TLS, and audit logging.
• OpenShift and Kubernetes security integration experience.

Responsibilities

• Deploy and integrate CyberArk Secrets Manager into PAM/Vault.
• Implement RBAC, policy mgmt, credential rotation.
• Ensure high availability and disaster recovery configurations.
• Integrate Secrets Manager with OpenShift/Kubernetes workloads.
• Support GitLab CI/CD secret injection and runtime retrieval.

Skills

CyberArk PAM/Vault

Secrets Manager deployment

RBAC & policy management

Credential rotation

Secret retrieval workflows

HA & DR configurations

TLS/certificate implementation

Audit logging

OpenShift integration

Kubernetes workloads security

GitLab CI/CD secrets

Secure application onboarding

Container security & automation

Tools

OpenShift

Kubernetes

GitLab CI/CD

Job description

Exciting Remote CyberArk PAM Engineer/Architect, 6 months, contract opportunity.

The project is centered on deploying CyberArk Secrets Manager and integrating it into the existing PAM/Vault ecosystem without redesigning the current vault architecture. Strong product experience is essential to avoid delays and misconfigurations.

CyberArk PAM and Secrets Manager Expertise – candidate to work Central Time Zone.
Candidates should have hands-on experience with:

• CyberArk PAM/Vault and integrations
• CyberArk Secrets Manager deployment and configuration, RBAC, policy management, credential rotation, safes, CPM, and secret retrieval workflows
• High availability (HA) and disaster recovery (DR) configurations
• TLS/certificate implementation and audit logging

OpenShift / Kubernetes and DevSecOps Integration Skills should be capable of:

• Integrating Secrets Manager with OpenShift of:
• Integrating Secrets Manager with OpenShift/Kubernetes workloads
• Managing service accounts, namespaces, workload identities, and manifests
• Supporting GitLab CI/CD secret injection and runtime secret retrieval
• Implementing secure application onboarding patterns
• Understanding container security and automation pipelines