Secrets Management Platform Engineer

🕒 Agosto 14

🇺🇸 Estados Unidos – Remoto (EUA)

⏰ Tempo Integral

🟡 Pleno

🟠 Sênior

🏗️ Engenheiro de Plataforma

👻 Score fantasma 53%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

True Zero Technologies, LLC

SiteLinkedInTodas as Vagas

11 - 50 funcionários

💼 Consultoria

🏥 Saúde

📦 Logística

Consulting • Healthcare • Logistics

A True Zero Technologies, LLC é uma empresa de propriedade de veteranos, especializada em soluções de cibersegurança. A empresa oferece uma gama de serviços, incluindo engenharia e arquitetura de segurança, adoção de tecnologias emergentes, operações cibernéticas, inteligência de ameaças cibernéticas, testes de penetração e garantia de informação. A True Zero também é reconhecida por seus serviços gerenciados e capacidades de segurança em nuvem. A empresa faz parcerias com líderes tecnológicos como Tanium, Splunk, Cribl e Zscaler para fornecer soluções de alto impacto e alto valor, que ajudam as organizações a inovar enquanto aprimoram seus programas de segurança e operacionais. A True Zero está comprometida em capacitar organizações com insights acionáveis para proteger seus ambientes de TI de forma eficaz.

Descrição

• Onboard applications, services, users, and machine identities into a centralized secrets management platform such as CyberArk or HashiCorp Vault • Design and implement secure processes for credential provisioning, storage, retrieval, rotation, revocation, and retirement • Integrate AWS Secrets Manager and AWS Systems Manager Parameter Store with enterprise applications and cloud-native workloads • Develop and enforce least-privilege IAM policies for secrets, credentials, encryption keys, and privileged services • Automate secrets-management workflows using Python, Terraform, Ansible, and approved infrastructure-as-code technologies • Integrate secrets management into CI/CD pipelines and DevSecOps workflows • Design and support secrets integration for containers, Kubernetes workloads, cloud services, virtual machines, and application platforms • Implement and maintain PKI and certificate management processes • Eliminate hard-coded credentials, static passwords, embedded API keys, and unmanaged secrets • Implement FIPS 140-2/3 cryptographic controls and integrate solutions with AWS KMS in AWS GovCloud where required • Configure authentication methods and access policies for users, applications, workloads, and machine identities • Implement dynamic or short-lived credentials • Maintain centralized auditing, logging, monitoring, and alerting for secrets access and policy violations • Develop and enforce governance standards for secret ownership, access, rotation, expiration, and lifecycle management • Partner with application, cloud, platform, cybersecurity, and DevSecOps teams • Troubleshoot authentication, authorization, credential rotation, certificate, API, and platform integration issues • Maintain technical documentation, onboarding procedures, platform standards, runbooks, and governance processes • Continuously improve platform availability, scalability, automation, security controls, onboarding efficiency, and operational resilience

🎯 Requisitos

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related technical discipline • Demonstrated experience implementing or administering CyberArk or HashiCorp Vault • Experience with AWS Secrets Manager, AWS Systems Manager Parameter Store, and AWS KMS • Strong understanding of Identity and Access Management, role-based access control, policy-based access, and least-privilege principles • Hands-on automation experience using Python, Terraform, and/or Ansible • Experience integrating secrets-management solutions with CI/CD pipelines, DevSecOps workflows, and automated deployment processes • Experience with PKI, certificate management, encryption, key management, and certificate lifecycle automation • Understanding of container and cloud security, including Kubernetes and cloud-native workloads • Experience designing credential rotation, dynamic secrets, machine identity, and privileged-access workflows • Familiarity with FIPS 140-2/3 validated cryptography and cryptographic requirements for government or regulated environments • Experience identifying and eliminating hard-coded credentials and unmanaged secrets • Strong understanding of Zero Trust principles • Experience with centralized logging, monitoring, auditing, compliance reporting, and security-event integration • Strong troubleshooting, documentation, governance, automation, and cross-functional collaboration skills • Experience supporting AWS GovCloud, government, defense, or other regulated cloud environments is preferred • Preferred certifications: AWS Certified Security – Specialty; AWS Certified Solutions Architect – Associate; HashiCorp Certified: Vault Associate or applicable CyberArk Defender/Sentry certification; CISSP or CISM

🏖️ Benefícios

• Competitive salary, paid twice per month • Best in class medical coverage • 100% of medical premiums covered by True Zero • Company wide new business incentive programs • Contribution Incentives (i.e. white papers, blog posts, internal webinars, etc.) • 3 weeks of PTO starting + 11 Paid Holidays Annually • 401k Program with 100% company match on the first 4% • Monthly reimbursement of Cell Phone and Home Internet costs • Paternity/Maternity Leave • Investment in training and certifications to broaden and deepen your technical skills

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo