Secrets Platform Engineer – IAM, Vault & Cloud Security

True Zero Technologies LLC.; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Competitive salary

Best in class medical coverage

401k Program with company match

Paternity/Maternity Leave

Training and certifications

Job summary

True Zero Technologies LLC. seeks a seasoned Secrets Management Platform Engineer to design, implement, and operate a centralized platform handling credentials, keys, certs, and tokens across apps, services, and cloud workloads.

You will onboard thousands of applications, enforce least-privilege access, automate provisioning and rotation, and integrate with CyberArk/HashiCorp Vault, AWS KMS, and Kubernetes in a hybrid cloud environment.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related technical discipline.
• Experience implementing or administering an enterprise secrets management platform such as CyberArk or HashiCorp Vault.
• Experience with AWS Secrets Manager, AWS Systems Manager Parameter Store, and AWS KMS.
• Strong understanding of Identity and Access Management, role-based access control, policy-based access, and least-privilege principles.
• Hands-on automation experience using Python, Terraform, and/or Ansible.
• Experience integrating secrets-management solutions with CI/CD pipelines, DevSecOps workflows, and automated deployment processes.
• Experience with PKI, certificate management, encryption, key management, and certificate lifecycle automation.
• Understanding of container and cloud security, including secrets integration for Kubernetes, containerized applications, and cloud-native workloads.
• Experience designing credential rotation, dynamic secrets, machine identity, and privileged-access workflows.
• Familiarity with FIPS 140-2/3 validated cryptography and cryptographic requirements for government or regulated environments.

Responsibilities

• Onboard applications, services, users, and machine identities into a centralized secrets management platform such as CyberArk or HashiCorp Vault.
• Design and implement secure processes for credential provisioning, storage, retrieval, rotation, revocation, and retirement.
• Integrate AWS Secrets Manager and AWS Systems Manager Parameter Store with enterprise applications and cloud-native workloads.
• Develop and enforce least-privilege Identity and Access Management policies for access to secrets, credentials, encryption keys, and privileged services.
• Automate secrets management workflows using Python, Terraform, Ansible, and approved infrastructure-as-code technologies.
• Integrate secrets management into CI/CD pipelines and DevSecOps workflows to eliminate manually managed or embedded credentials.
• Design and support secrets integration for containers, Kubernetes-based workloads, cloud services, virtual machines, and application platforms.
• Implement and maintain PKI and certificate management processes, including certificate issuance, renewal, rotation, revocation, and expiration monitoring.
• Eliminate hard-coded credentials, static passwords, embedded API keys, and unmanaged secrets from source code, configuration files, scripts, pipelines, and application deployments.
• Implement FIPS 140-2/3 validated cryptographic controls and integrate secrets-management solutions with AWS KMS in AWS GovCloud where required.
• Configure authentication methods and access policies for users, applications, workloads, and machine identities.
• Implement dynamic or short-lived credentials where supported to reduce reliance on long-lived static secrets.
• Maintain centralized auditing, logging, monitoring, and alerting for secrets access, administrative activity, credential rotation, and policy violations.
• Develop and enforce governance standards for secret ownership, naming, classification, access, rotation frequency, expiration, and lifecycle management.
• Partner with application, cloud, platform, cybersecurity, and DevSecOps teams to integrate secrets-management capabilities into enterprise architectures and development workflows.
• Troubleshoot authentication, authorization, credential rotation, certificate, API, and platform integration issues.
• Maintain technical documentation, onboarding procedures, platform standards, operational runbooks, and governance processes.
• Continuously improve platform availability, scalability, automation, security controls, onboarding efficiency, and operational resilience.

Skills

Python

Terraform

Ansible

Least Privilege

Zero Trust

CI/CD Integration

Troubleshooting

Automation

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related technical discipline

Tools

CyberArk

HashiCorp Vault

AWS Secrets Manager

AWS Systems Manager Parameter Store

AWS KMS

Kubernetes

PKI

FIPS cryptography

Job description

True Zero Technologies LLC. seeks a seasoned Secrets Management Platform Engineer to design, implement, and operate a centralized platform handling credentials, keys, certs, and tokens across apps, services, and cloud workloads.

You will onboard thousands of applications, enforce least-privilege access, automate provisioning and rotation, and integrate with CyberArk/HashiCorp Vault, AWS KMS, and Kubernetes in a hybrid cloud environment.