UKG is seeking a Staff Information Security Engineer to join the Enterprise Identity and Access Management (IAM) team within Global Security. This hybrid role focuses on building and supporting security solutions for machine identities, certificates, secrets, and access management across UKG enterprise and cloud environments.
Role Overview
The Enterprise IAM team designs, develops, and maintains solutions that strengthen how machine identities and access credentials are issued, managed, and governed. The position emphasizes certificate lifecycle management, secrets management, secure authentication and authorization patterns, and reliable operations for core security platforms.
Responsibilities
- Design, develop, and maintain enterprise certificate lifecycle management solutions supporting internal and external PKI environments
- Build and enhance secrets management capabilities using HashiCorp Vault, HashiCorp Consul, and cloud-native security services
- Design, implement, and support highly available Vault environments, including disaster recovery, resiliency, performance optimization, and platform scalability
- Design and implement secure authentication and authorization patterns for applications, platforms, infrastructure, and machine identities
- Develop scalable solutions to automate certificate issuance, renewal, rotation, revocation, and inventory management
- Build and maintain automation and tooling using PowerShell, Python, Terraform, GitHub Actions, REST APIs, and cloud-native technologies
- Design and implement secure secrets management workflows for credentials, API keys, tokens, certificates, and service accounts
- Develop and maintain Infrastructure-as-Code (IaC) solutions supporting IAM, secrets management, and certificate management services
- Design and implement IAM solutions across AWS and GCP
- Develop automation for identity lifecycle management, access provisioning, privileged access workflows, and machine identity governance
- Collaborate with application, infrastructure, and platform teams to integrate enterprise services with certificate management, IAM, and secrets management platforms
- Build reusable Terraform modules, automation frameworks, and deployment patterns to improve consistency, scalability, and operational efficiency
- Implement monitoring, observability, and operational dashboards using Grafana, Prometheus, PagerDuty, and related tooling
- Develop and maintain operational metrics, dashboards, alerts, and automated response workflows for IAM, secrets management, certificate management, and cloud security services
- Participate in architecture reviews and provide guidance on certificate management, machine identity security, secrets management, cloud IAM, and access management best practices
- Troubleshoot and resolve complex issues involving certificates, IAM, authentication, authorization, secrets management, and cloud security services
- Partner with Security Engineering teams to implement and improve security controls, monitoring, automation, and governance capabilities
- Contribute to engineering standards, technical documentation, automation frameworks, platform reliability initiatives, and operational maturity improvements
- Identify opportunities to reduce operational risk and manual effort through automation and process improvements
- Mentor engineers and share technical knowledge within the team
Required Qualifications
- 8+ years of experience in information security engineering, platform engineering, cloud engineering, systems engineering, identity and access management, or a related technical field
- Experience administering and supporting HashiCorp Vault in enterprise environments, including high availability and disaster recovery
- Experience working with HashiCorp Consul and service discovery technologies
- Experience designing, implementing, or supporting certificate lifecycle management and PKI solutions
- Experience working with AWS IAM and/or GCP IAM
- Experience developing Infrastructure-as-Code using Terraform
- Experience developing automation using PowerShell and Python (and scripting frameworks)
- Experience building CI/CD automation using GitHub Actions or similar platforms
- Experience implementing observability, monitoring, and alerting using Grafana, Prometheus, PagerDuty, or similar platforms
- Experience designing and supporting highly available, secure enterprise platforms
- Experience troubleshooting authentication, authorization, certificate, secrets management, and access-related issues
- Experience working with REST APIs, system integrations, and automation frameworks
- Strong analytical, problem-solving, and debugging skills
- Ability to collaborate effectively across engineering, infrastructure, security, and platform teams
Technologies
- HashiCorp Vault
- HashiCorp Consul
- PowerShell
- Python
- Terraform
- GitHub Actions
- Grafana
- Prometheus
- PagerDuty
- Amazon Web Services (AWS) IAM
- Google Cloud Platform (GCP) IAM
- ACME
- Workload Identity Federation (WIF)
- REST APIs
- Infrastructure-as-Code (IaC)
- CI/CD
- Kubernetes
About the Team
- UKG is seeking a Staff Information Security Engineer for the Enterprise Identity and Access Management (IAM) team within Global Security
- This role designs, develops, and supports solutions that secure machine identities, certificates, secrets, and access management across UKG’s enterprise and cloud environments
Preferred Qualifications
- Experience designing and operating highly available HashiCorp Vault deployments at enterprise scale
- Experience implementing enterprise certificate lifecycle management platforms and automation frameworks
- Experience managing public and private PKI environments
- Experience implementing automated certificate issuance and renewal using ACME or similar protocols
- Experience designing and implementing machine identity management solutions
- Experience implementing Workload Identity Federation (WIF) or other keyless authentication solutions
- Experience securing and managing non-human identities, service accounts, and workload identities
- Experience working with Kubernetes, containerized workloads, and cloud-native platforms
- Experience developing reusable automation frameworks using Terraform, PowerShell, Python, and GitHub Actions
- Experience implementing security controls and governance capabilities within AWS and GCP environments
- Experience implementing observability strategies for security and infrastructure platforms using Grafana, Prometheus, PagerDuty, and related monitoring technologies
- Familiarity with Identity Governance and Administration (IGA) and Privileged Access Management (PAM) platforms
- Experience supporting compliance and audit requirements related to identity, access management, certificates, and secrets management
- Experience improving operational maturity, platform observability, reliability, and automation at enterprise scale
- Experience working in Agile engineering environments
Job Details
- Job ID: STAFF020425
- Employment Type: Regular
- Work Style: hybrid
- Location: Sunrise, FL, United States
- Salary: USD 115,100 - 165,450 per year
- Minimum Experience: 8 years
Company and Benefits
UKG emphasizes continuous learning and thoughtful challenge to improve how work gets done, with recognition for team wins. The role includes flexibility, benefits, and a team-oriented approach.
Company Overview
UKG is the Workforce Operating Platform that puts workforce understanding to work.
Hiring Scams Notice
UKG will never ask you for a copy of your driver’s license, social security card, or passport during a job application process.
