Hybrid IAM & Secrets Engineer — Vault & PKI

UKG Inc.; Florida; Hybrid; USD 115,000 - 165,000; Full time

Job summary

UKG Inc. is seeking a Staff Information Security Engineer to join the Enterprise IAM team. You will design and maintain certificate lifecycle management and secrets management across AWS and GCP, building scalable Vault environments and automating issuance, rotation, and revocation of credentials.

The role emphasizes automation, IaC, and observability, collaborating with security, cloud, and platform teams to raise security maturity and platform reliability at scale.

Qualifications

• 8+ years of experience in information security engineering, platform engineering, cloud engineering, systems engineering, identity and access management, or related field.
• Experience administering HashiCorp Vault in enterprise environments (HA and DR).
• Experience with HashiCorp Consul and service discovery technologies.
• Experience designing or supporting certificate lifecycle management and PKI solutions.
• Experience with AWS IAM and/or GCP IAM.
• Experience with Terraform and IaC.
• Experience with automation using PowerShell, Python, and scripting frameworks.
• Experience building CI/CD automation with GitHub Actions.
• Experience observability and monitoring with Grafana, Prometheus, PagerDuty.

Responsibilities

• Design, develop, and maintain enterprise certificate lifecycle management solutions for internal and external PKI environments.
• Build and enhance secrets management using Vault, Consul, and cloud-native services.
• Implement secure authentication/authorization patterns for apps, platforms, infrastructure, and machine identities.
• Automate certificate issuance, renewal, rotation, revocation, and inventory management.
• Develop IaC for IAM, secrets management, and certificate services.
• Develop automation with Terraform, PowerShell, Python, and GitHub Actions.
• Monitor, observability, and dashboards to improve platform reliability and security.

Skills

HashiCorp Vault

HashiCorp Consul

AWS IAM

GCP IAM

Terraform

PowerShell

Python

GitHub Actions

Grafana

Prometheus

Tools

Terraform

GitHub Actions

PowerShell

Python

Job description

UKG Inc. is seeking a Staff Information Security Engineer to join the Enterprise IAM team. You will design and maintain certificate lifecycle management and secrets management across AWS and GCP, building scalable Vault environments and automating issuance, rotation, and revocation of credentials.

The role emphasizes automation, IaC, and observability, collaborating with security, cloud, and platform teams to raise security maturity and platform reliability at scale.