PAM & Secrets Engineer (CyberArk + Vault) - Divestiture Ready

Motivus; México; Remote; MXN 600,000 - 900,000; Full time

Job summary

Motivus is seeking an Engineer specializing in Privileged Access Management (PAM) and Secrets Management to lead the implementation and strategic oversight of technologies during a large-scale corporate divestiture. The role will focus on secure separation, migration, and ongoing protection of privileged credentials and confidential secrets for the divested entity.

You will design, deploy, and manage CyberArk and HashiCorp Vault environments, enforce least privilege, integrate with CI/CD and

Qualifications

• 3–5 years of information security experience focused on PAM and secrets management.
• Fluent English (conversational) required.
• Experience designing, implementing, and managing CyberArk.
• Experience with HashiCorp Vault: deployment, policy management, integration.
• Understanding of privileged access, encryption, key management, and credential management.
• Scripting skills (Python, PowerShell, HCL) for automation and integration.

Responsibilities

• Develop and execute strategies for secure separation of PAM and Vault environments during divestiture.
• Plan and implement solutions ensuring integrity, confidentiality, and availability of privileged credentials and secrets.
• Establish PAM and secrets management policies, access controls, and integrations for the divested environment.
• Design, implement, configure, and maintain CyberArk PAM system.

Skills

Privileged Access Management

HashiCorp Vault

CyberArk

Python

PowerShell

HCL

CI/CD

Kubernetes

ACLs

OPA

Tools

CyberArk

HashiCorp Vault

Kubernetes

Job description

Motivus is seeking an Engineer specializing in Privileged Access Management (PAM) and Secrets Management to lead the implementation and strategic oversight of technologies during a large-scale corporate divestiture. The role will focus on secure separation, migration, and ongoing protection of privileged credentials and confidential secrets for the divested entity.

You will design, deploy, and manage CyberArk and HashiCorp Vault environments, enforce least privilege, integrate with CI/CD and