Secrets Management Engineer — Multi-Cloud Security

CBRE; Miami (FL); On-site; USD 95,000 - 100,000; Full time

Job summary

CBRE is seeking a Cybersecurity Engineer to advance enterprise secrets management across multi-cloud and hybrid environments. You will implement vaulting solutions, automate secret workflows, and enforce least-privilege controls in collaboration with Compliance, Risk, and Audit teams.

You will also integrate secret tooling into CI/CD pipelines, Kubernetes platforms, and DevSecOps toolchains, while contributing to risk assessments and architecture reviews to strengthen security posture globally.

Qualifications

• Bachelor's degree (BA/BS) in a related field preferred or 3-5 years of relevant enterprise experience.
• Hands-on experience implementing or integrating at least one enterprise or cloud secrets service such as HashiCorp Vault, Akeyless, AWS Secrets Manager, Azure Key Vault, or GCP Secret Manager.
• Intermediate experience administering security-based tools related to CSPM/CNAPP, CIEM, SIEM, or vulnerability scanners (OSA, SAST, DAST).
• Working knowledge of a second cloud provider (e.g., AWS, Azure, GCP, Alibaba) in addition to the primary platform.
• Intermediate experience writing and running Terraform.
• Intermediate Linux systems administration experience or equivalent skills.
• Intermediate experience with DevOps or CI/CD pipelines (GitHub Actions, GitLab, Jenkins, ADO Pipelines, etc.).
• Working knowledge of source control management and practices using Git and GitHub.
• Experience onboarding and integrating third-party PaaS and SaaS solutions.

Responsibilities

• Implement, configure, and maintain enterprise secrets vaulting solutions across multi-cloud and hybrid environments, using tools such as HashiCorp Vault, Akeyless, AWS Secrets Manager, GCP Secrets Manager, and Azure Key Vault.
• Build and maintain secure, reusable patterns and automation workflows for the management of application and machine secrets, including API keys, credentials, and other secret types.
• Apply and help enforce governance policies and controls for least privilege access, lifecycle management, and secrets rotation aligned with enterprise compliance frameworks (e.g., NIST, CIS, ISO 27001).
• Support integration of secrets management into CI/CD pipelines, container platforms (e.g., Kubernetes), and DevSecOps toolchains to enable secure application delivery.
• Assist with risk assessments and architectural reviews for secrets usage across infrastructure, applications, and third-party integrations, identifying misconfigurations or policy violations.
• Develop and maintain Infrastructure as Code (IaC) patterns for secrets provisioning using tools such as Terraform.
• Partner with platform, cloud, and application teams to promote secure secrets practices and enable vault adoption through enablement, documentation, and training.
• Monitor secrets usage and access activity using logging, telemetry, and SIEM integrations to detect anomalies and support auditability.
• Support incident response and forensics efforts related to secrets exposure or misuse, collaborating with incident management and threat detection teams.
• Contribute to the continuous improvement of the secrets management architecture, staying current with threat models, emerging tools, and industry best practices.
• Provide technical support for identity and access management and secrets management products, adjusting and updating existing solutions as needed.
• Participate in an on-call rotation to help ensure the uptime and functionality of critical internal customer services.
• Hold well-founded opinions and be willing to express disagreement when something doesn't pass the 'smell test.'
• Other duties as assigned.

Skills

Cybersecurity engineering

DevSecOps

Threat modeling

Governance & compliance

Education

Bachelor's degree (BA/BS) in a related field preferred

Tools

HashiCorp Vault

Akeyless

AWS Secrets Manager

GCP Secrets Manager

Azure Key Vault

Terraform

Kubernetes

GitHub Actions

Job description

CBRE is seeking a Cybersecurity Engineer to advance enterprise secrets management across multi-cloud and hybrid environments. You will implement vaulting solutions, automate secret workflows, and enforce least-privilege controls in collaboration with Compliance, Risk, and Audit teams.

You will also integrate secret tooling into CI/CD pipelines, Kubernetes platforms, and DevSecOps toolchains, while contributing to risk assessments and architecture reviews to strengthen security posture globally.