Secrets Management Engineer - Cloud Security & Vaults

CBRE; Austin (TX); On-site; USD 95,000 - 100,000; Full time

Benefits offered by this job

Discretionary bonus

Job summary

CBRE seeks a Cybersecurity Engineer specializing in secrets management to apply strong engineering knowledge across multi-cloud and hybrid environments. You will implement vaulting solutions, automate secret workflows, enforce least-privilege policies, and integrate security into CI/CD pipelines.

You will collaborate with Compliance, Risk, Audit, and Legal to bolster a holistic security ecosystem globally. The role emphasizes continuous improvement, threat awareness, and working with DevSecOps

Qualifications

• Bachelor's degree in a related field or 3–5 years of enterprise experience.
• Hands-on experience implementing or integrating at least one enterprise or cloud secrets service such as HashiCorp Vault, Akeyless, AWS Secrets Manager, Azure Key Vault, or GCP Secret Manager.
• Intermediate experience administering CSPM/CNAPP, CIEM, SIEM, or vulnerability scanners.
• Working knowledge of a second cloud provider in addition to the primary platform.
• Intermediate experience writing and running Terraform.
• Intermediate Linux systems administration experience or equivalent skills.
• Intermediate DevOps or CI/CD pipelines (GitHub Actions, GitLab, Jenkins, ADO).
• Working knowledge of Git and GitHub.

Responsibilities

• Implement, configure, and maintain enterprise secrets vaulting solutions across multi-cloud and hybrid environments.
• Build and maintain secure, reusable patterns and automation workflows for secrets management.
• Apply governance policies for least privilege access and lifecycle management.
• Support integration of secrets management into CI/CD pipelines and container platforms like Kubernetes.
• Assist with risk assessments and architectural reviews for secrets usage across infrastructure and integrations.
• Develop and maintain IaC patterns for secrets provisioning (Terraform).
• Partner with platform teams to promote secure secrets practices and vault adoption.
• Monitor secrets usage and access activity to detect anomalies and support auditability.

Skills

Secrets management

Vault

Terraform

Kubernetes

CI/CD

DevSecOps

Cloud platforms

SIEM

Governance

Linux

Education

Bachelor's degree in related field

3-5 years enterprise experience

Tools

HashiCorp Vault

Akeyless

AWS Secrets Manager

Azure Key Vault

GCP Secrets Manager

Kubernetes

Job description

CBRE seeks a Cybersecurity Engineer specializing in secrets management to apply strong engineering knowledge across multi-cloud and hybrid environments. You will implement vaulting solutions, automate secret workflows, enforce least-privilege policies, and integrate security into CI/CD pipelines.

You will collaborate with Compliance, Risk, Audit, and Legal to bolster a holistic security ecosystem globally. The role emphasizes continuous improvement, threat awareness, and working with DevSecOps