IAM On Prem & Cloud Secret Management Professional

Contactx Resource Management; Gurugram District; Hybrid; INR 3,000,000 - 4,500,000; Full time

Job summary

Contactx Resource Management invites an experienced security architect to lead secrets management and IAM initiatives in hybrid cloud environments. You will define target-state architecture, implement privileged access controls, and drive the migration of workloads to robust identity and secret management practices.

You will collaborate with security, cloud, and DevOps teams to establish governance, create reference patterns, and produce onboarding playbooks for engineering teams across Azure,

Qualifications

• The candidate has BE/B.Tech. or MCA in CS with 10–15 years hands-on experience.
• Proven enterprise transformation in secrets management, IAM, PAM, DevSecOps or machine identity.
• Strong knowledge of IAM concepts including RBAC, ABAC, federation, and audit controls.

Responsibilities

• Assess current secrets management and IAM practices across Azure, AWS, on-prem, Kubernetes, CI/CD, apps, databases, APIs, and service accounts.
• Define target-state architecture for secrets management, IAM integration, workload identity, privileged access, credential rotation, audit and governance.
• Create enterprise standards for secrets storage, access, rotation, ownership, naming, tagging, expiry, and decommissioning.
• Define when to use centralized secrets platforms versus cloud-native tools such as Azure Key Vault and AWS Secrets Manager.
• Design IAM access models using Azure Entra ID, AWS IAM, roles, policies, groups, service principals, managed identities, OIDC federation, and least-privilege access.
• Support onboarding and migration of application teams from insecure or inconsistent secrets and IAM practices.
• Integrate secrets management with IAM, PAM, CI/CD pipelines, Kubernetes, databases, APIs, legacy apps, logging, monitoring, and SIEM.
• Help establish operating model components such as ownership, support processes, governance, exception management, control monitoring, and reporting.
• Produce practical documentation, reference architectures, onboarding playbooks, and implementation patterns for engineering teams.

Skills

IAM

Secrets management

DevSecOps

Cloud security

RBAC ABAC

Education

BE/B.Tech. or MCA in CS

Tools

Azure Key Vault

AWS Secrets Manager

HashiCorp Vault

Job description

Requirements

The key responsibilities of this role are:.

• Assess current secrets management and IAM practices across Azure, AWS, on-premises, Kubernetes, CI/CD, applications, databases, APIs, and service accounts.
• Define target-state architecture for secrets management, IAM integration, workload identity, privileged access, credential rotation, audit, and governance.
• Create enterprise standards for secrets storage, access, rotation, ownership, naming, tagging, expiry, exception handling, and decommissioning.
• Define when to use centralized secrets platforms versus cloud-native tools such as Azure Key Vault and AWS Secrets Manager.
• Design IAM access models using Azure Entra ID, AWS IAM, roles, policies, groups, service principals, managed identities, OIDC federation, and least-privilege access.
• Support onboarding and migration of application teams from insecure or inconsistent secrets and IAM practices.
• Integrate secrets management with IAM, PAM, CI/CD pipelines, Kubernetes, databases, APIs, legacy applications, logging, monitoring, and SIEM.
• Help establish operating model components such as ownership, support processes, governance, exception management, control monitoring, and reporting.
• Produce practical documentation, reference architectures, onboarding playbooks, and implementation patterns for engineering teams.

About you

Your skills and experience

• B.E./B.Tech. Or M.C.A. in Computer Science from a reputed University with 10-15 years of hands‑on experience on below mentioned skills.
• Proven experience delivering at least one enterprise transformation in secrets management, IAM, PAM, DevSecOps, cloud security, or machine identity.
• Strong understanding of IAM concepts, including authentication, authorization, RBAC, ABAC, least privilege, federation, workload identity, privileged access, service accounts, access reviews, and audit controls.
• Hands‑on experience with Azure and AWS IAM services, including Entra ID, Azure Managed Identity, service principals, AWS IAM roles, policies, STS, and OIDC.
• Experience with at least two secrets management technologies, such as Azure Key Vault, AWS Secrets Manager, HashiCorp Vault, CyberArk Conjur, Akeyless, Thales CipherTrust, External Secrets Operator, or Secrets Store CSI Driver.
• Experience working in hybrid environments with cloud and on‑premises workloads.
• Experience integrating secrets and IAM controls with CI/CD tools such as Azure DevOps, GitHub Actions, Jenkins, GitLab, or similar.
• Ability to define enterprise standards, target‑state architecture, migration plans, governance models, and practical engineering patterns.
• Strong stakeholder management skills across security, cloud, platform, infrastructure, application, risk, and audit teams.