Secrets Platform Engineer - Zero Trust & GovCloud

True Zero Technologies LLC.; United States; On-site; USD 130,000 - 190,000; Full time

Benefits offered by this job

Competitive salary

Excellent health coverage

401k with company match

PTO and holidays

Job summary

True Zero Technologies is seeking a skilled Secrets Management Platform Engineer to design, implement, and operate a centralized enterprise secrets platform across cloud and on-prem environments. You will onboard thousands of apps, automate credential provisioning, rotation, and access governance.

The role emphasizes least-privilege, zero-trust principles, integration with AWS KMS, and CI/CD pipelines. A strong automation background in Python, Terraform, and Ansible is essential.

Qualifications

• Bachelor’s degree in a technical discipline required.
• Experience implementing or administering an enterprise secrets management platform (CyberArk or HashiCorp Vault).
• Experience with AWS Secrets Manager, AWS Systems Manager Parameter Store, and AWS KMS.
• Strong understanding of IAM, RBAC, policy-based access, and least privilege.
• Hands-on automation using Python, Terraform, and/or Ansible.
• Experience integrating secrets-management with CI/CD, DevSecOps, and automated deployments.
• Experience with PKI, certificate management, and lifecycle automation.
• Knowledge of Zero Trust principles and government/regulatory cloud environments is preferred.

Responsibilities

• Onboard applications, services, users, and machine identities into a centralized secrets platform (CyberArk or HashiCorp Vault).
• Design secure processes for credential provisioning, storage, retrieval, rotation, and retirement.
• Integrate AWS Secrets Manager and AWS Systems Manager Parameter Store with enterprise apps and cloud workloads.
• Develop and enforce least-privilege IAM policies and access controls for secrets and keys.
• Automate secrets workflows using Python, Terraform, Ansible, and IaC technologies.
• Integrate secrets-management into CI/CD pipelines and DevSecOps workflows; eliminate hard-coded credentials.
• Support secrets integration for containers, Kubernetes, cloud services, VMs, and platforms.
• Manage PKI and certificate issuance, renewal, rotation, and monitoring.

Skills

Python

Terraform

Ansible

Identity and Access Management

Least privilege

Zero Trust

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related technical discipline

Tools

CyberArk

HashiCorp Vault

AWS Secrets Manager

AWS KMS

AWS Systems Manager Parameter Store

Kubernetes

PKI

Job description

True Zero Technologies is seeking a skilled Secrets Management Platform Engineer to design, implement, and operate a centralized enterprise secrets platform across cloud and on-prem environments. You will onboard thousands of apps, automate credential provisioning, rotation, and access governance.

The role emphasizes least-privilege, zero-trust principles, integration with AWS KMS, and CI/CD pipelines. A strong automation background in Python, Terraform, and Ansible is essential.