Professional, Machine Identity & Secrets Engineer

Zinnov Management Consulting; Bengaluru; Hybrid; INR 1,800,000 - 3,000,000; Full time

Job summary

Zinnov Management Consulting in Bengaluru is seeking a Professional, Machine Identity & Secrets Engineer to join a new India GCC. You will design and operate secrets-management platforms, manage machine identities, and implement PKI life-cycle across cloud and on‑prem, integrating with Kubernetes and CI/CD.

The role emphasizes automation, security controls, and cross‑functional collaboration to safeguard enterprise identities.

Qualifications

• 3+ years in IAM, PAM, cybersecurity engineering, or related identity-security disciplines.
• Hands-on with at least one secrets-management or PAM platform (Vault, CyberArk, Azure Key Vault, Secrets Manager).
• Strong understanding of machine identities, service accounts, tokens, certificates and privileged-access controls.
• Experience with cloud identity/security, APIs, Kubernetes, CI/CD, and infrastructure automation.

Responsibilities

• Design and operate secrets-management platforms across cloud and on‑prem environments.
• Manage machine identities, service accounts, API credentials, tokens, keys, and certificates.
• Implement certificate and PKI lifecycle management with vendor platforms.
• Support workload identities and integration with Kubernetes, CI/CD pipelines.
• Automate secrets rotation, privileged credential handling, and policy enforcement.
• Monitor identities, credentials expiry, and drive remediation with owners.
• Troubleshoot authentication and identity-integration issues; perform root-cause analysis.
• Develop machine-identity standards, procedures, and audit-ready documentation.

Skills

IAM

PAM

Cybersecurity

Platform engineering

Cloud security

OAuth 2.0/JWT

Secure credential lifecycle

Education

Bachelor's degree in IT, Cybersecurity, CS, IS

Tools

HashiCorp Vault

CyberArk

Azure Key Vault

AWS Secrets Manager

GCP Secret Manager

Venafi TLS Protect

Kubernetes Secrets Operators

Terraform

Python

PowerShell

Job description

Zinnov is hiring for the role of Professional, Machine Identity & Secrets Engineer on behalf of our Global MNC MedTech client company a company where technology sits at the centre of everything: powering how the core business operates day to day and shaping the products and digital solutions that will define the future of patient care. This role is part of the companys establishment of their new India Global Capability Centre (GCC) in Bengaluru which will drive enterprise technology, digital transformation and innovation for its global operations and contributing to technology that ultimately helps millions of people around the world.

How you'll make an impact

• Design and operate secrets-management platforms such as HashiCorp Vault, CyberArk Conjur / Secrets Manager, Azure Key Vault, AWS Secrets Manager, GCP Secret Manager, or equivalent.
• Manage machine identities, service accounts, API credentials, tokens, keys, certificates, and non-human identities across applications, infrastructure, cloud, and CI/CD environments.
• Implement certificate and PKI lifecycle management using platforms such as Venafi TLS Protect, Microsoft AD CS, DigiCert, or equivalent, including discovery, issuance, renewal, revocation, and expiration monitoring.
• Support modern workload identity patterns such as managed identities, workload identity federation, SPIFFE/SPIRE, Kubernetes service accounts, mTLS, OAuth 2.0, JWT, and short-lived credentials.
• Integrate secrets and machine-identity controls into Kubernetes, Terraform, GitHub/Azure DevOps/Jenkins pipelines, application runtimes, and infrastructure automation.
• Automate secrets rotation, certificate renewal, privileged credential handling, access provisioning, and policy enforcement using APIs, Python, PowerShell, Terraform, or equivalent tools.
• Monitor stale or excessive machine identities, embedded credentials, certificate expiry, privileged secrets, and policy violations and drive remediation with owners.
• Troubleshoot complex authentication, certificate, token, secrets, and identity-integration issues and perform root-cause analysis.
• Develop machine-identity standards, operating procedures, architecture documentation, audit evidence, and control metrics aligned to enterprise cybersecurity requirements.

What you'll bring

Skills Required:

• 3+ years of Experience in IAM, PAM, cybersecurity engineering, infrastructure security, platform engineering, or related identity-security disciplines.
• Hands-on experience with at least one secrets-management or PAM platform such as HashiCorp Vault, CyberArk, Azure Key Vault, AWS Secrets Manager, or equivalent.
• Strong understanding of machine identities, service accounts, secrets, certificates/PKI, authentication, authorization, tokens, keys, and privileged-access controls.
• Experience with cloud identity/security, APIs, Kubernetes or container platforms, CI/CD, and infrastructure automation in modern enterprise environments.
• Working knowledge of OAuth 2.0, JWT, mTLS, certificates, managed/workload identities, and secure credential lifecycle practices.
• Experience automating security or identity workflows using Python, PowerShell, Terraform, REST APIs, or equivalent tooling.
• Strong troubleshooting, documentation, security-control, audit, and cross-functional collaboration skills.
• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related field; equivalent experience may be considered.

Preferred:

• Experience with Venafi, Microsoft AD CS, SPIFFE/SPIRE, workload identity federation, Kubernetes secrets operators, or certificate automation.