Privileged Access Management & Secrets Management Sr Engineer

About This Role

This senior engineering role involves designing, implementing, and operating automated credential solutions to protect privileged access in hybrid environments. The engineer will influence the overall objectives and long-range goals of Secrets Management for the organization, participate in developing and rolling out new services, and champion available solutions for the DevOps community.

Responsibilities

• Design, deploy, and document secure credential platforms
• Architect, install, and maintain industry-leading PAM and secrets tools such as HashiCorp Vault and CyberArk Conjur
• Ensure robust protection of privileged accounts across on-premise, cloud, and edge systems
• Assist development teams to seamlessly embed secret retrieval, rotation, and lifecycle processes into CI/CD workflows
• Shape the organization’s long-term Secrets Management roadmap
• Champion best practice solutions
• Serve as an evangelist for secure credential management within the DevOps community

Requirements

• Proven track record implementing HashiCorp Vault, CyberArk Conjur, or comparable PAM/secret management platforms at scale
• Strong background in integration of secrets management into Jenkins, GitLab, similar CI/CD tools and the corresponding web services and workloads
• Experience supporting compliance ensuring secrets management complies with standards such as DFARS, CMMC, SOX, and ISO 27001
• Clear understanding of programmatic authentication methods ranging from static methods to token-based, key-based, and specific platform workload methods
• Proficiency in scripting (Python, PowerShell, Bash) and infrastructure-as-code (Terraform, CloudFormation)
• Experience supporting cyber operations through secure system design and enhancing defensive visibility with identity and access management
• Excellent communication and stakeholder management abilities; capable of influencing cross-functional teams and advocating security best practices
• Ability to translate complex security requirements into practical, automated solutions
• Passion for staying current with emerging threats, cryptographic standards, and evolving PAM technologies
• Collaborative mindset, fostering a security-first culture within DevOps and engineering squads
• US Citizenship is required due to system access

Nice to have:

• Ansible experience
• Knowledge of managing security for AWS IAM resources
• SailPoint IIQ experience
• Information Security experience
• Active Directory experience
• Active Secret Clearance

Benefits

• Medical, Dental, Vision