Secrets Management Platform Engineer

Responsibilities

• Onboard applications, services, users, and machine identities into a centralized secrets management platform such as CyberArk or HashiCorp Vault
• Design and implement secure processes for credential provisioning, storage, retrieval, rotation, revocation, and retirement
• Integrate AWS Secrets Manager and AWS Systems Manager Parameter Store with enterprise applications and cloud-native workloads
• Develop and enforce least-privilege Identity and Access Management policies
• Automate secrets management workflows using Python, Terraform, and Ansible
• Integrate secrets management into CI/CD pipelines and DevSecOps workflows
• Implement and maintain PKI and certificate management processes
• Eliminate hard-coded credentials and unmanaged secrets from source code and pipelines
• Implement FIPS 140-2/3 validated cryptographic controls and integrate with AWS KMS in AWS GovCloud
• Maintain centralized auditing, logging, monitoring, and alerting for secrets access

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, or a related technical discipline
• Experience implementing or administering CyberArk or HashiCorp Vault
• Experience with AWS Secrets Manager, AWS Systems Manager Parameter Store, and AWS KMS
• Strong understanding of Identity and Access Management and least-privilege principles
• Hands-on automation experience using Python, Terraform, and/or Ansible
• Experience with PKI, certificate management, and encryption
• Understanding of container and cloud security, including Kubernetes
• Familiarity with FIPS 140-2/3 validated cryptography
• Knowledge of Zero Trust principles

Preferred Qualifications

• Experience supporting AWS GovCloud or regulated government/defense environments
• AWS Certified Security – Specialty
• AWS Certified Solutions Architect – Associate
• HashiCorp Certified: Vault Associate or CyberArk certifications
• CISSP or CISM certification

Benefits

• Competitive salary
• 100% of medical premiums covered
• 3 weeks of PTO plus 11 paid holidays
• 401k with 100% company match on the first 4%
• Monthly reimbursement for cell phone and home internet
• Paternity/Maternity Leave
• Investment in training and certifications

About the Company

True Zero Technologies is a veteran-owned small business dedicated to the purposeful enablement of people and technology. Recognized as a Best Place to Work and an Inc. 5000 fastest-growing company, True Zero focuses on delivering top-tier services through a people-first approach.