Senior Security Engineer - Vault, IAM & Automation

UKG; Town of Florida (NY); On-site; USD 140,000 - 180,000; Full time

Job summary

UKG is seeking a seasoned information security/Platform engineer to join our enterprise-grade infrastructure team. You will design, deploy, and operate highly available Vault deployments, integrate Consul for service discovery, and manage certificate lifecycles and IAM across AWS and GCP.

You will build automation with PowerShell and Python, implement CI/CD through GitHub Actions, and strengthen observability with Grafana/Prometheus.

Qualifications

• Experience administering HashiCorp Vault in enterprise environments with HA/DR configurations.
• Experience working with HashiCorp Consul and service discovery.
• Certificate lifecycle management and PKI design/implementation.
• Experience with AWS IAM and/or GCP IAM.
• Automation development using PowerShell and Python.
• CI/CD automation using GitHub Actions or similar platforms.
• Observability and alerting using Grafana, Prometheus, PagerDuty.
• Designing and operating highly available secure enterprise platforms.
• Troubleshooting authentication, authorization, certificates, secrets management, and access issues.
• Working with REST APIs and system integrations.

Skills

InfoSec engineering

Platform engineering

Cloud engineering

Systems engineering

Kubernetes

Automation scripting

CI/CD automation

Observability design

Collaboration across teams

Threat & identity governance

Tools

HashiCorp Vault

HashiCorp Consul

PKI & certificate lifecycle

AWS IAM

GCP IAM

GitHub Actions

Grafana

Prometheus

PagerDuty

Terraform

ACME protocols

WIF/workload identity

Job description

UKG is seeking a seasoned information security/Platform engineer to join our enterprise-grade infrastructure team. You will design, deploy, and operate highly available Vault deployments, integrate Consul for service discovery, and manage certificate lifecycles and IAM across AWS and GCP.

You will build automation with PowerShell and Python, implement CI/CD through GitHub Actions, and strengthen observability with Grafana/Prometheus.