Secrets Platform Engineer: IAM & Automation

True Zero Technologies LLC.; United States; Remote; USD 120,000 - 190,000; Full time

Benefits offered by this job

Competitive salary

Medical premiums covered

PTO and holidays

401k with company match

Training & certifications

Job summary

True Zero Technologies is seeking a security-focused engineer to build and operate a centralized secrets platform (CyberArk or Vault) for the United States. You will design secure credentialing, automate provisioning and rotation, and enforce least-privilege IAM across cloud and on-prem workloads.

The role requires hands-on experience with AWS secrets services, PKI, and cryptography, plus familiarity with Kubernetes and Zero Trust concepts.

Qualifications

• Bachelor's degree in cybersecurity, CS, or related field.
• Experience implementing CyberArk or Vault.
• Experience with AWS Secrets Manager, SSM, and KMS.
• Strong IAM and least-privilege understanding.
• Automation experience with Python, Terraform, Ansible.
• PKI, certificate management and encryption.
• Kubernetes/container security knowledge.
• FIPS 140-2/3 cryptography familiarity.
• Knowledge of Zero Trust concepts.

Responsibilities

• Onboard applications, services, users, and machine identities into a centralized secrets platform (CyberArk or Vault).
• Design secure credential provisioning, storage, rotation, revocation, and retirement processes.
• Integrate AWS Secrets Manager and AWS SSM Parameter Store with enterprise apps and workloads.
• Develop and enforce least-privilege IAM policies.
• Automate secrets workflows using Python, Terraform, and Ansible.
• Integrate secrets into CI/CD pipelines and DevSecOps.

Skills

Identity and Access Management

Least-privilege

Automation

Python

Terraform

Ansible

Kubernetes

Zero Trust

Cryptography

Education

Bachelor's degree in Cybersecurity or CS

Tools

CyberArk

HashiCorp Vault

AWS Secrets Manager

AWS Systems Manager Parameter Store

AWS KMS

Job description

True Zero Technologies is seeking a security-focused engineer to build and operate a centralized secrets platform (CyberArk or Vault) for the United States. You will design secure credentialing, automate provisioning and rotation, and enforce least-privilege IAM across cloud and on-prem workloads.

The role requires hands-on experience with AWS secrets services, PKI, and cryptography, plus familiarity with Kubernetes and Zero Trust concepts.