CyberArk Engineer - Secrets Manager / Conjur

At KeyData Cyber, we’re shaping the future of identity security. Recognized by Gartner and KuppingerCole as a leading IAM professional services firm, we specialize exclusively in designing, deploying, and managing end-to-end Identity and Access Management programs for organizations across North America.

With 20 years of experience, 50M+ identities managed, and 1,000+ successful deployments, our team is our strongest asset and is built by design to help clients protect critical infrastructure, enable digital transformation, and ensure compliance with confidence.

We deliver comprehensive solutions across IAM domains, including:

• Workforce IAM (Access Management, Identity Governance and Administration, Privileged Access Management)
• Consumer IAM (Identity Verification, Authentication and Access, Threat Detection) in highly regulated industries.

If you’re ready to grow your career alongside some of the industry’s best, come join us — you’re key to our success

As a CyberArk Engineer-Secrets Manager / Conjur , You will be a key member of our Delivery Services Team, responsible for implementing, configuring, and supporting enterprise Privileged Access Management (PAM) and secrets management solutions. This role focuses on hands-on delivery of CyberArk PAM, Secrets Manager, and Conjur On-Prem, including integration with existing CyberArk Vault environments and modern DevSecOps platforms.

Location: USA, Remote

Employment Type: Contract, Immediate Start through March 2027

What You’ll Do:

• Design, configure, and maintain CyberArk PAM, Secrets Manager, and Conjur On-Prem environments.
• Integrate Secrets Manager/Conjur with existing CyberArk PAM/Vault environments in alignment with the established vault architecture.
• Implement PAM and secrets management configurations based on defined architecture, security controls, and access models.
• Configure and manage RBAC, policies, credential rotation, Safes, CPM, and secret retrieval workflows.
• Integrate Secrets Manager/Conjur with OpenShift/Kubernetes workloads, including service accounts, namespaces, workload identities, and manifests.
• Implement GitLab CI/CD secret injection and runtime secret retrieval.
• Build and support HA/DR, TLS/certificates, audit logging, backup/recovery, and monitoring configurations.
• Onboard applications and implement secure secret management patterns.
• Collaborate with infrastructure and security teams across networking, DNS, firewalls, load balancers, Linux/server environments, and enterprise authentication.
• Troubleshoot and resolve technical issues, document configurations, and support architects and clients throughout implementation.

Who We’re Looking For:

• 5+ years of experience in PAM, cybersecurity, identity, or security engineering.
• Strong hands-on experience with CyberArk PAM/Vault and CyberArk Secrets Manager.
• Experience with Conjur On-Prem deployment, configuration, and integration.
• Experience integrating secrets management with OpenShift/Kubernetes and GitLab CI/CD.
• Solid working knowledge of RBAC, credential rotation, Safes, CPM, policies, secret retrieval, and privileged access controls.
• Experience with HA/DR, TLS/certificates, audit logging, networking, and security hardening.
• Strong troubleshooting, documentation, and communication skills.
• Ability to work independently on assigned tasks and collaboratively within a delivery team.

Nice-to-Have Skills:

• CyberArk Sentry – Secrets Manager (SECRET-SEN) or CyberArk CDE – Secrets certification is strongly preferred.
• Additional CyberArk certifications, such as Defender, Sentry PAM, or CDE – PAM.
• DevSecOps, APIs, automation, Infrastructure as Code, and CI/CD experience.
• Experience with container security and automated application onboarding.
• Familiarity with security/compliance frameworks and vulnerability management.
• Programming/scripting experience such as Python, Bash, or PowerShell. #LI-RR1

Why You’ll Love Working Here

At KeyData Cyber, we put people first, valuing learning, growth, and work-life balance. We offer extensive opportunities to advance your career through leading digital identity projects across North America. Our culture is built on respect, inclusion, and equal opportunity for everyone.

Accessibility & Accommodations

If you require accommodation due to a disability at any time during the recruitment and/or assessment process, please contact Talent Acquisition , and we will make all reasonable efforts to accommodate your request.

Fraud Prevention & Identity Verification

We may use information provided during the application process to help prevent fraud and verify identity. These checks may be conducted automatically through trusted third‑party service providers as part of our standard application screening process.

Apply now to join the KeyData Cyber team and be part of our mission to secure the future of digital identity across North America.