Secrets Management Platform Engineer

True Zero Technologies; United States; Remote; USD 120,000 - 190,000; Full time

Benefits offered by this job

Competitive salary

Medical premiums covered

PTO and holidays

401k with company match

Training & certifications

Job summary

True Zero Technologies is seeking a security-focused engineer to build and operate a centralized secrets platform (CyberArk or Vault) for the United States. You will design secure credentialing, automate provisioning and rotation, and enforce least-privilege IAM across cloud and on-prem workloads.

The role requires hands-on experience with AWS secrets services, PKI, and cryptography, plus familiarity with Kubernetes and Zero Trust concepts.

Qualifications

• Bachelor's degree in cybersecurity, CS, or related field.
• Experience implementing CyberArk or Vault.
• Experience with AWS Secrets Manager, SSM, and KMS.
• Strong IAM and least-privilege understanding.
• Automation experience with Python, Terraform, Ansible.
• PKI, certificate management and encryption.
• Kubernetes/container security knowledge.
• FIPS 140-2/3 cryptography familiarity.
• Knowledge of Zero Trust concepts.

Responsibilities

• Onboard applications, services, users, and machine identities into a centralized secrets platform (CyberArk or Vault).
• Design secure credential provisioning, storage, rotation, revocation, and retirement processes.
• Integrate AWS Secrets Manager and AWS SSM Parameter Store with enterprise apps and workloads.
• Develop and enforce least-privilege IAM policies.
• Automate secrets workflows using Python, Terraform, and Ansible.
• Integrate secrets into CI/CD pipelines and DevSecOps.

Skills

Identity and Access Management

Least-privilege

Automation

Python

Terraform

Ansible

Kubernetes

Zero Trust

Cryptography

Education

Bachelor's degree in Cybersecurity or CS

Tools

CyberArk

HashiCorp Vault

AWS Secrets Manager

AWS Systems Manager Parameter Store

AWS KMS

Job description

Responsibilities

• Onboard applications, services, users, and machine identities into a centralized secrets management platform such as CyberArk or HashiCorp Vault
• Design and implement secure processes for credential provisioning, storage, retrieval, rotation, revocation, and retirement
• Integrate AWS Secrets Manager and AWS Systems Manager Parameter Store with enterprise applications and cloud-native workloads
• Develop and enforce least-privilege Identity and Access Management policies
• Automate secrets management workflows using Python, Terraform, and Ansible
• Integrate secrets management into CI/CD pipelines and DevSecOps workflows
• Implement and maintain PKI and certificate management processes
• Eliminate hard-coded credentials and unmanaged secrets from source code and pipelines
• Implement FIPS 140-2/3 validated cryptographic controls and integrate with AWS KMS in AWS GovCloud
• Maintain centralized auditing, logging, monitoring, and alerting for secrets access

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, or a related technical discipline
• Experience implementing or administering CyberArk or HashiCorp Vault
• Experience with AWS Secrets Manager, AWS Systems Manager Parameter Store, and AWS KMS
• Strong understanding of Identity and Access Management and least-privilege principles
• Hands-on automation experience using Python, Terraform, and/or Ansible
• Experience with PKI, certificate management, and encryption
• Understanding of container and cloud security, including Kubernetes
• Familiarity with FIPS 140-2/3 validated cryptography
• Knowledge of Zero Trust principles

Preferred Qualifications

• Experience supporting AWS GovCloud or regulated government/defense environments
• AWS Certified Security – Specialty
• AWS Certified Solutions Architect – Associate
• HashiCorp Certified: Vault Associate or CyberArk certifications
• CISSP or CISM certification

Benefits

• Competitive salary
• 100% of medical premiums covered
• 3 weeks of PTO plus 11 paid holidays
• 401k with 100% company match on the first 4%
• Monthly reimbursement for cell phone and home internet
• Paternity/Maternity Leave
• Investment in training and certifications

About the Company

True Zero Technologies is a veteran-owned small business dedicated to the purposeful enablement of people and technology. Recognized as a Best Place to Work and an Inc. 5000 fastest-growing company, True Zero focuses on delivering top-tier services through a people-first approach.