Sign upLog in
Architecture Jobs in Boston, MA

CyberArk Architect-Secrets Manager / Conjur (Contract)

KeyData Cyber
  • Boston, MA
    2 days ago

    Job Description

    At KeyData Cyber, we're shaping the future of identity security. Recognized by Gartner and KuppingerCole as a leading IAM professional services firm, we specialize exclusively in designing, deploying, and managing end-to-end Identity and Access Management programs for organizations across North America.

    With 20 years of experience, 50M+ identities managed, and 1,000+ successful deployments, our team is our strongest asset and is built by design to help clients protect critical infrastructure, enable digital transformation, and ensure compliance with confidence.

    We deliver comprehensive solutions across IAM domains, including:

    • Workforce IAM (Access Management, Identity Governance and Administration, Privileged Access Management)
    • Consumer IAM (Identity Verification, Authentication and Access, Threat Detection) in highly regulated industries.

    If you're ready to grow your career alongside some of the industry's best, come join us — you're key to our success

    As a CyberArk Architect- Secrets Manager / Conjur, You will be a key member of our Delivery Services Team, responsible for designing, implementing, and advising on enterprise Privileged Access Management (PAM) and secrets management solutions. This role focuses on CyberArk PAM, Secrets Manager, and Conjur On-Prem, including integration with existing CyberArk Vault environments and modern DevSecOps platforms.

    Location: USA, remote

    Employment Type: Contract, Immediate Start through March 2027

    What You'll Do:

    • Design and implement enterprise CyberArk PAM, Secrets Manager, and Conjur On-Prem solutions.
    • Integrate Secrets Manager/Conjur with existing CyberArk PAM/Vault environments without redesigning the current vault architecture.
    • Define PAM and secrets management architecture, security controls, access models, and implementation roadmaps.
    • Configure RBAC, policies, credential rotation, Safes, CPM, and secret retrieval workflows.
    • Integrate Secrets Manager/Conjur with OpenShift/Kubernetes workloads, including service accounts, namespaces, workload identities, and manifests.
    • Support GitLab CI/CD secret injection and runtime secret retrieval.
    • Design and implement HA/DR, TLS/certificates, audit logging, backup/recovery, and monitoring.
    • Develop secure application onboarding and secret management patterns.
    • Work with infrastructure and security teams across networking, DNS, firewalls, load balancers, Linux/server environments, and enterprise authentication.
    • Lead technical discussions, troubleshoot complex issues, and provide guidance to engineers and clients.

    Who We're Looking For:

    • 8+ years of experience in PAM, cybersecurity, identity, or security architecture.
    • ⁠Bachelor's or Master's Degree in Computer Science, Computer Engineering, Management Information Systems, Cybersecurity, or equivalent experience 
    • Strong hands-on experience with CyberArk PAM/Vault and CyberArk Secrets Manager.
    • Experience with Conjur On-Prem deployment, configuration, and integration.
    • Experience integrating secrets management with OpenShift/Kubernetes and GitLab CI/CD.
    • Strong knowledge of RBAC, credential rotation, Safes, CPM, policies, secret retrieval, and privileged access controls.
    • Experience with HA/DR, TLS/certificates, audit logging, networking, and security hardening.
    • Strong troubleshooting, communication, and client-facing skills.
    • Ability to design solutions while working independently and collaboratively

    Preferred Qualifications:

    • CyberArk Sentry – Secrets Manager (SECRET-SEN) or CyberArk CDE – Secrets certification is strongly preferred.
    • Additional CyberArk certifications, such as CDE – PAM, Sentry PAM, or Defender.
    • DevSecOps, APIs, automation, Infrastructure as Code, and CI/CD experience.
    • Experience with container security and automated application onboarding.
    • Knowledge of security/compliance frameworks and vulnerability management.
    • Programming/scripting experience such as Python, Java, or PowerShell. #LI-RJ1

    Why You'll Love Working Here

    At KeyData Cyber, we put people first, valuing learning, growth, and work-life balance. We offer extensive opportunities to advance your career through leading digital identity projects across North America. Our culture is built on respect, inclusion, and equal opportunity for everyone.

    Accessibility & Accommodations

    If you require accommodation due to a disability at any time during the recruitment and/or assessment process, please contact 

    %20talent.acquisition@keydata.ca

     , and we will make all reasonable efforts to accommodate your request. 

    Fraud Prevention & Identity Verification

    We may use information provided during the application process to help prevent fraud and verify identity. These checks may be conducted automatically through trusted third‑party service providers as part of our standard application screening process.

    Apply now to join the KeyData Cyber team and be part of our mission to secure the future of digital identity across North America.

    Numbers & Facts

    LocationBoston, MA

    Skills

    • Access Controlunmatched
    • Application Programming Interface (API)unmatched
    • Architectural Designunmatched
    • Authenticationunmatched
    • Automationunmatched
    • CDE (Common Desktop Environment)unmatched
    • Certified Diabetes Educator (CDE)unmatched
    • Communication Skillsunmatched
    • Computer Engineeringunmatched
    • Computer Scienceunmatched
    • Computer Securityunmatched
    • Continuous Deployment/Deliveryunmatched
    • Continuous Integrationunmatched
    • Customer Relationsunmatched
    • DNS (Domain Name System)unmatched
    • Data Recoveryunmatched
    • Firewallsunmatched
    • Identify Issuesunmatched
    • Identity Data Managementunmatched
    • Injectionsunmatched
    • Internet Securityunmatched
    • Javaunmatched
    • Linux Operating Systemunmatched
    • Load Balancingunmatched
    • Maintain Complianceunmatched
    • Management of Information Systems/Technology (MIS)unmatched
    • Network Securityunmatched
    • Onboardingunmatched
    • Organizational Development/Managementunmatched
    • People Managementunmatched
    • Professional Servicesunmatched
    • Python Programming/Scripting Languageunmatched
    • SSL-TLS (Secure Socket Layer - Transport Layer Security)unmatched
    • Scripting (Scripting Languages)unmatched
    • Security Architectureunmatched
    • Software Developmentunmatched
    • Technical Leadershipunmatched
    • Windows PowerShellunmatched

    Be found by employers

    5,500+ employers search our resume database daily. Add yours to get found by recruiters looking for candidates like you.

    Level up your application

    Professional resume templates

    Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.

    Free resume templates

    Free resume builder

    Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.

    Free resume builder