Staff IAM & Secrets Security Engineer

Cybersecurity Jobs; Florida; Hybrid; USD 115,000 - 165,000; Full time

Job summary

UKG is seeking a Staff Information Security Engineer to support IAM across enterprise and cloud environments, focusing on machine identities, certificates, and secrets. This hybrid role emphasizes designing, developing, and supporting secure solutions for identity and access management.

You will implement certificate lifecycle management for PKI, automate IAM workflows, and build scalable, observable platforms using Vault, Consul, Terraform, and cloud-native tools across AWS and GCP.

Qualifications

• 8+ years of information security engineering, platform engineering, cloud engineering, systems engineering, identity and access management, or a related field.
• Experience administering and supporting HashiCorp Vault in enterprise environments, including high availability and disaster recovery configurations.
• Experience working with HashiCorp Consul and service discovery technologies.
• Experience designing, implementing, or supporting certificate lifecycle management and PKI solutions.
• Experience working with AWS IAM and/or GCP IAM.
• Experience developing Infrastructure-as-Code solutions using Terraform.

Responsibilities

• Design, develop, and maintain enterprise certificate lifecycle management solutions for internal and external PKI environments.
• Build and enhance secrets management capabilities using HashiCorp Vault, Consul, and cloud-native security services.
• Design, implement, and support highly available HashiCorp Vault environments, including disaster recovery, resiliency, performance optimization, and scalability.
• Design and implement secure authentication and authorization patterns for applications, platforms, infrastructure, and machine identities.
• Develop scalable solutions to automate certificate issuance, renewal, rotation, revocation, and inventory management.
• Build automation and tooling using PowerShell, Python, Terraform, GitHub Actions, REST APIs, and cloud-native technologies.
• Design and implement secure secrets management workflows for credentials, API keys, tokens, certificates, and service accounts.
• Develop and maintain Infrastructure-as-Code (IaC) solutions supporting IAM, secrets management, and certificate management services.
• Design and implement IAM solutions across AWS and GCP.

Skills

HashiCorp Vault

HashiCorp Consul

PowerShell

Python

Terraform

GitHub Actions

Grafana

Prometheus

PagerDuty

AWS IAM

GCP IAM

REST APIs

Kubernetes

CI/CD

IaC

Tools

Terraform

GitHub Actions

Grafana

Prometheus

PagerDuty

AWS IAM

GCP IAM

Kubernetes

Job description

UKG is seeking a Staff Information Security Engineer to support IAM across enterprise and cloud environments, focusing on machine identities, certificates, and secrets. This hybrid role emphasizes designing, developing, and supporting secure solutions for identity and access management.

You will implement certificate lifecycle management for PKI, automate IAM workflows, and build scalable, observable platforms using Vault, Consul, Terraform, and cloud-native tools across AWS and GCP.