Keeper Security Implementation Engineer

Conviso Inc.; Washington (District of Columbia); Remote; USD 120,000 - 180,000; Full time

Job summary

Conviso Inc. is seeking a Keeper Security Implementation Engineer to lead end-to-end setup, deployment, and optimization of Keeper Enterprise for diverse clients in a fully remote role.

You will provision the Keeper platform, configure Entra ID integrations, and ensure secure, compliant operation across all environments. In this role you will monitor platform health, manage RBAC, coordinate with OIT leadership and the CISO, handle cost attribution, and drive continuous improvement with the SASSY

Qualifications

• Keeper Enterprise knowledge: Vault, Admin Console, Secrets Manager, Connection Manager, PAM concepts.
• Cloud hosting environments (AWS preferred) and network/gateway deployment familiarity.
• CI/CD integration and secrets injection for automated workflows.
• Technical writing and runbook/SOP development for as-built docs.

Responsibilities

• Provision and configure the Keeper Enterprise platform within client environments.
• Configure Entra ID SSO/SCIM for automated user provisioning.
• Monitor platform health and incident response; manage RBAC via Entra ID.
• Maintain security dashboards and runbooks; support ATO processes.
• Produce monthly license consumption and cost allocations.
• Develop onboarding guides and SOPs for Keeper capabilities.

Skills

Password & Secrets Management

Cloud & Infrastructure

DevOps & Toolchain

Documentation

Tools

Keeper Enterprise

AWS

CI/CD

Git-based workflows

Job description

Conviso Inc is hiring Keeper Security Implementation Engineer role, this is a 100% REMOTE set-up position & comes with benefits, 401K & some accrued PTO. The Ideal Candidate will own the full platform lifecycle, implementation, daily operations, system administration, and proactive maintenance, ensuring Keeper remains secure, performant, cost-efficient, and compliant with federal requirements.

Title: Keeper Security Implementation Engineer

Responsibilities:

Implementation & Deployment

• Provision and configure the Keeper Enterprise platform (Vault, Secrets Manager, Connection Manager, and related modules) within client’s environment
• Configure integration with Entra ID (SSO/SCIM) for automated user provisioning, deprovisioning, and directory sync
• Validate all components for compatibility, performance, and compliance prior to production release

Daily Operations & System Administration

• Serve as the primary point of contact for platform health, availability, and incident response
• Monitor performance, uptime, and reliability across the Vault, Admin Console, Secrets Manager, and connected gateways/bridges
• Administer RBAC integrated with Entra ID, managing team- and individual-level permissions
• Manage integrations with developer and IT toolchains (CI/CD, RPA, service accounts) via Keeper Secrets Manager (KSM)
• Maintain usage and security reporting dashboards for OIT Leadership
• Document proofs-of-concept and leading practices

Security, Compliance & Access Governance

• Enforce security policies (password complexity, MFA, sharing restrictions, IP allowlisting)
• Update security configurations in response to policy changes, vulnerabilities, or audit findings
• Support the Authority to Operate (ATO) process in collaboration with the CISO and SASSY AWS Team
• Conduct compliance monitoring and audit log review
• Administer and test break-glass/emergency access procedures

Cost Management & Capacity Administration

• Administer licensing allocations and ensure accurate cost attribution
• Review utilization and adjust license tiers/entitlements as needed
• Deliver monthly reporting on license consumption, adoption, and budget variance

Maintenance & Continuous Improvement

• Perform routine and emergency patching, upgrades, and configuration changes
• Maintain as-built architecture documentation, configuration records, and runbooks
• Identify optimizations to improve performance, cost, and user experience
• Refine SOPs and escalation processes in collaboration with the CIO and OIT

Training & Stakeholder Support

• Develop onboarding guides, SOPs, and vault usage documentation
• Act as subject matter expert for OIT leadership on Keeper capabilities and best practices

Required Skills & Qualifications

• Password & Secrets Management: Keeper Enterprise (Vault, Admin Console, Secrets Manager, Connection Manager); PAM concepts
• Cloud & Infrastructure: Cloud hosting environments (AWS preferred); networking and gateway/bridge deployment familiarity
• DevOps & Toolchain: CI/CD integration, secrets injection for automated workflows, Git-based workflows
• Documentation: Technical writing, runbook/SOP development, as-built documentation

Key Interfaces

• OIT / CIO — Platform governance, operational reporting, strategic alignment
• CISO / Cybersecurity Team — Credential security policy, continuous authorization
• SASSY Team — Coordination with engineers, architects, and functional workstreams