Secrets Platform Engineer: Vault & KMS Automation

Socket.dev; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive salary

Medical coverage

401k with company match

Paternity/Maternity leave

Training and certifications

Paid holidays

Job summary

True Zero Technologies is seeking a Secrets Management Platform Engineer to design, implement, and operate a centralized enterprise secrets platform across applications, services, cloud environments, and CI/CD workflows. The role focuses on onboarding thousands of assets, automating credential provisioning, and enforcing strict access controls.

UK/US GovCloud readiness and strong cryptography foundations, including PKI and certificate lifecycle, underpin the security posture.

Qualifications

• Bachelor’s degree in a technical discipline related to cybersecurity or IT.
• Experience with an enterprise secrets platform such as CyberArk or Vault.
• Experience with AWS Secrets Manager, SSM Parameter Store and KMS.
• Strong understanding of IAM, RBAC, policy-based access and least-privilege.
• Hands-on automation using Python, Terraform, and Ansible.
• Experience integrating secrets-management with CI/CD and DevSecOps.
• Experience with PKI, certificate lifecycle, encryption and key management.
• Knowledge of container security and cloud-native workloads.

Responsibilities

• Onboard applications and services into a centralized secrets platform like CyberArk or Vault.
• Design secure credential provisioning, storage, retrieval, rotation, revocation and retirement.
• Integrate AWS Secrets Manager and Parameter Store with enterprise apps.
• Develop and enforce least-privilege IAM policies for secrets access.
• Automate secrets workflows using Python, Terraform, Ansible.
• Embed secrets-management in CI/CD pipelines and DevSecOps.
• Support secrets integration for containers, Kubernetes, and cloud workloads.
• Manage PKI and certificate processes including issuance, renewal and revocation.
• Eliminate hard-coded credentials from code, configs, scripts, and deployments.
• Maintain centralized auditing, logging, monitoring, and policy governance.

Skills

Zero Trust principles

Least privilege

DevSecOps collaboration

Troubleshooting

Security controls

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or related

Tools

CyberArk

HashiCorp Vault

AWS Secrets Manager

AWS Systems Manager Parameter Store

AWS KMS

Kubernetes

Job description

True Zero Technologies is seeking a Secrets Management Platform Engineer to design, implement, and operate a centralized enterprise secrets platform across applications, services, cloud environments, and CI/CD workflows. The role focuses on onboarding thousands of assets, automating credential provisioning, and enforcing strict access controls.

UK/US GovCloud readiness and strong cryptography foundations, including PKI and certificate lifecycle, underpin the security posture.