Secrets Platform Engineer - Zero Trust & IAM Specialist

Remote; San Francisco (CA); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Competitive salary

Best-in-class medical coverage

401k with company match

Paid holidays

Professional development support

Job summary

True Zero Technologies seeks a Secrets Platform Engineer to design, implement, and operate a centralized secrets management platform. You will onboard thousands of applications, automate provisioning and rotation, and enforce strict least-privilege controls across cloud and CI/CD environments.

You will support AWS GovCloud and FIPS-compliant cryptography, integrating with AWS KMS and approved secrets-management services, while maintaining audits, governance, and incident response readiness.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related technical discipline.
• Experience implementing or administering an enterprise secrets management platform such as CyberArk or HashiCorp Vault.
• Experience with AWS Secrets Manager, AWS Systems Manager Parameter Store, and AWS KMS.
• Strong understanding of IAM, RBAC, policy-based access, and least-privilege principles.
• Hands-on automation using Python, Terraform, and/or Ansible.
• Experience integrating secrets-management with CI/CD, DevSecOps, and automated deployment.

Responsibilities

• Onboard applications, services, users, and machine identities into a centralized secrets management platform (CyberArk or Vault).
• Design secure processes for credential provisioning, storage, retrieval, rotation, revocation, and retirement.
• Integrate AWS Secrets Manager and AWS SSM Parameter Store with enterprise apps and cloud workloads.
• Enforce least-privilege IAM policies for secrets, credentials, and keys.
• Automate secrets workflows using Python, Terraform, Ansible; integrate with CI/CD pipelines.

Skills

Identity & Access Management

Zero Trust

Automation

Education

Bachelor's degree in Cybersecurity or related

Tools

CyberArk

HashiCorp Vault

AWS Secrets Manager

AWS KMS

Terraform

Ansible

Job description

True Zero Technologies seeks a Secrets Platform Engineer to design, implement, and operate a centralized secrets management platform. You will onboard thousands of applications, automate provisioning and rotation, and enforce strict least-privilege controls across cloud and CI/CD environments.

You will support AWS GovCloud and FIPS-compliant cryptography, integrating with AWS KMS and approved secrets-management services, while maintaining audits, governance, and incident response readiness.