Staff Information Security Engineer

UKG; Town of Florida (NY); On-site; USD 140,000 - 180,000; Full time

Job summary

UKG is seeking a seasoned information security/Platform engineer to join our enterprise-grade infrastructure team. You will design, deploy, and operate highly available Vault deployments, integrate Consul for service discovery, and manage certificate lifecycles and IAM across AWS and GCP.

You will build automation with PowerShell and Python, implement CI/CD through GitHub Actions, and strengthen observability with Grafana/Prometheus.

Qualifications

• Experience administering HashiCorp Vault in enterprise environments with HA/DR configurations.
• Experience working with HashiCorp Consul and service discovery.
• Certificate lifecycle management and PKI design/implementation.
• Experience with AWS IAM and/or GCP IAM.
• Automation development using PowerShell and Python.
• CI/CD automation using GitHub Actions or similar platforms.
• Observability and alerting using Grafana, Prometheus, PagerDuty.
• Designing and operating highly available secure enterprise platforms.
• Troubleshooting authentication, authorization, certificates, secrets management, and access issues.
• Working with REST APIs and system integrations.

Skills

InfoSec engineering

Platform engineering

Cloud engineering

Systems engineering

Kubernetes

Automation scripting

CI/CD automation

Observability design

Collaboration across teams

Threat & identity governance

Tools

HashiCorp Vault

HashiCorp Consul

PKI & certificate lifecycle

AWS IAM

GCP IAM

GitHub Actions

Grafana

Prometheus

PagerDuty

Terraform

ACME protocols

WIF/workload identity

Job description

• 8+ years of experience in information security engineering, platform engineering, cloud engineering, systems engineering, identity and access management, or a related technical field
• Experience administering and supporting HashiCorp Vault in enterprise environments, including high availability and disaster recovery configurations
• Experience working with HashiCorp Consul and service discovery technologies
• Experience designing, implementing, or supporting certificate lifecycle management and PKI solutions
• Experience working with AWS IAM and/or GCP IAM
• Experience developing automation using PowerShell, Python, and scripting frameworks
• Experience building CI/CD automation utilizing GitHub Actions or similar platforms
• Experience implementing observability, monitoring, and alerting solutions utilizing Grafana, Prometheus, PagerDuty, or similar platforms
• Experience designing and supporting highly available, secure enterprise platforms
• Experience troubleshooting authentication, authorization, certificate, secrets management, and access-related issues
• Experience working with REST APIs, system integrations, and automation frameworks
• Ability to collaborate effectively across engineering, infrastructure, security, and platform teams
• Experience designing and operating highly available HashiCorp Vault deployments at enterprise scale
• Experience implementing enterprise certificate lifecycle management platforms and automation frameworks
• Experience managing public and private PKI environments
• Experience implementing automated certificate issuance and renewal using ACME or similar protocols
• Experience designing and implementing machine identity management solutions
• Experience implementing Workload Identity Federation (WIF) or other keyless authentication solutions
• Experience securing and managing non-human identities, service accounts, and workload identities
• Experience working with Kubernetes, containerized workloads, and cloud-native platforms
• Experience developing reusable automation frameworks utilizing Terraform, PowerShell, Python, and GitHub Actions
• Experience implementing security controls and governance capabilities within AWS and GCP environments
• Experience implementing observability strategies for security and infrastructure platforms using Grafana, Prometheus, PagerDuty, and related monitoring technologies
• Familiarity with Identity Governance and Administration (IGA) and Privileged Access Management (PAM) platforms
• Experience supporting compliance and audit requirements related to identity, access management, certificates, and secrets management
• Experience improving operational maturity, platform observability, reliability, and automation at enterprise scale