Staff InfoSec Engineer: IAM, PKI & Vault Automation

Ukg-6; Florida; Hybrid; USD 115,000 - 165,000; Full time

Job summary

UKG is seeking a Staff Information Security Engineer to join the Enterprise IAM team. You will design and operate certificate lifecycle management, secrets management with Vault and Consul, and secure IAM across AWS and GCP. The role emphasizes automation, reliability, and scalable security platforms.

You will collaborate with security, cloud, and platform teams to implement governance, monitoring, and robust authentication/authorization patterns for machine identities and services.

Qualifications

• 8+ years in information security engineering or related field.
• Experience administering HashiCorp Vault in enterprise environments (HA & DR).
• Experience with HashiCorp Consul and service discovery.
• Experience designing or supporting certificate lifecycle management / PKI.
• Experience with AWS IAM and/or GCP IAM.
• Experience IaC with Terraform.
• Automation using PowerShell/Python/scripting.
• CI/CD automation with GitHub Actions.

Responsibilities

• Design, develop, and maintain enterprise certificate lifecycle management solutions.
• Build and enhance secrets management using Vault/Consul and cloud services.
• Automate certificate issuance, renewal, rotation, and revocation at scale.
• Implement secure authentication/authorization patterns for services and machines.
• Develop IaC and automation tooling; maintain Terraform modules and CI/CD pipelines.
• Monitor, observability, and alerting for security platforms and IAM services.

Skills

IAM design

Cloud security

Automation

Troubleshooting

CI/CD automation

Tools

HashiCorp Vault

HashiCorp Consul

Terraform

GitHub Actions

Kubernetes

Grafana

Prometheus

Job description

UKG is seeking a Staff Information Security Engineer to join the Enterprise IAM team. You will design and operate certificate lifecycle management, secrets management with Vault and Consul, and secure IAM across AWS and GCP. The role emphasizes automation, reliability, and scalable security platforms.

You will collaborate with security, cloud, and platform teams to implement governance, monitoring, and robust authentication/authorization patterns for machine identities and services.