Senior IAM & PKI/Secrets Engineer

UKG (Ultimate Kronos Group); Florida; Presencial; USD 115 000 - 165 000; Tempo integral

Resumo da oferta

UKG seeks a Staff Information Security Engineer to join the IAM team. You will design, develop, and support certificate lifecycle management, secrets management, and IAM across AWS and GCP, with automation and IaC to improve platform reliability.

You will build scalable Vault environments, implement secure authentication patterns, and collaborate with cross-functional teams to drive security maturity and operational excellence.

Qualificações

• 8+ years of experience in information security engineering, platform engineering, cloud engineering, or IAM.
• Experience administering and supporting HashiCorp Vault in enterprise environments, including high availability and disaster recovery configurations
• Experience working with HashiCorp Consul and service discovery technologies
• Experience designing, implementing, or supporting certificate lifecycle management and PKI solutions
• Experience working with AWS IAM and/or GCP IAM
• Experience developing Infrastructure-as-Code solutions using Terraform
• Experience developing automation using PowerShell, Python, and scripting frameworks
• Experience building CI/CD automation utilizing GitHub Actions or similar platforms
• Experience implementing observability, monitoring, and alerting solutions utilizing Grafana, Prometheus, PagerDuty, or similar platforms
• Experience designing and supporting highly available, secure enterprise platforms
• Experience troubleshooting authentication, authorization, certificate, secrets management, and access-related issues
• Experience working with REST APIs, system integrations, and automation frameworks
• Strong analytical, problem-solving, and debugging skills
• Ability to collaborate effectively across engineering, infrastructure, security, and platform teams

Responsabilidades

• Design, develop, and maintain enterprise certificate lifecycle management solutions supporting internal and external PKI environments
• Build and enhance secrets management capabilities utilizing HashiCorp Vault, Consul, and cloud-native security services
• Design, implement, and support highly available HashiCorp Vault environments, including disaster recovery, resiliency, performance optimization, and platform scalability
• Design and implement secure authentication and authorization patterns for applications, platforms, infrastructure, and machine identities
• Develop scalable solutions to automate certificate issuance, renewal, rotation, revocation, and inventory management
• Build and maintain automation and tooling utilizing PowerShell, Python, Terraform, GitHub Actions, APIs, and cloud-native technologies
• Design and implement secure secrets management workflows for credentials, API keys, tokens, certificates, and service accounts
• Develop and maintain Infrastructure-as-Code (IaC) solutions supporting IAM, secrets management, and certificate management services
• Design and implement IAM solutions across AWS and GCP
• Develop automation to support identity lifecycle management, access provisioning, privileged access workflows, and machine identity governance
• Collaborate with application, infrastructure, and platform teams to integrate enterprise services with certificate management, IAM, and secrets management platforms
• Build reusable Terraform modules, automation frameworks, and deployment patterns that improve consistency, scalability, and operational efficiency
• Implement monitoring, observability, and operational dashboards utilizing Grafana, Prometheus, PagerDuty, and related tooling to improve platform reliability
• Develop and maintain operational metrics, dashboards, alerts, and automated response workflows supporting IAM, secrets management, certificate management, and cloud security services
• Participate in architecture reviews and provide guidance on certificate management, machine identity security, secrets management, cloud IAM, and access management best practices
• Troubleshoot and resolve complex issues involving certificates, IAM, authentication, authorization, secrets management, and cloud security services
• Partner with Security Engineering teams to implement and improve security controls, monitoring, automation, and governance capabilities
• Contribute to engineering standards, technical documentation, automation frameworks, platform reliability initiatives, and operational maturity improvements
• Identify opportunities to reduce operational risk and manual effort through automation and process improvements
• Mentor engineers and share technical knowledge within the team

Conhecimentos

IAM

PKI

Automation scripting

Cloud IAM

CI/CD

Observability

Platform reliability

Security engineering

Identity governance

Kubernetes

Security controls

REST APIs

Collaboration across teams

Ferramentas

HashiCorp Vault

HashiCorp Consul

Terraform

GitHub Actions

Grafana

Prometheus

PagerDuty

Descrição da oferta de emprego

UKG seeks a Staff Information Security Engineer to join the IAM team. You will design, develop, and support certificate lifecycle management, secrets management, and IAM across AWS and GCP, with automation and IaC to improve platform reliability.

You will build scalable Vault environments, implement secure authentication patterns, and collaborate with cross-functional teams to drive security maturity and operational excellence.