Secret Management

Secret Management Engineer Jobs

4 jobs found

1d ago

Cybersecurity Engineer - PAM

Solu Technology Partners Buffalo, NY

Buffalo, NY

1d ago

$162k - $162k/yr Full time Active Directory Azure Azure Active Directory

Apply Now

Job Description

The Cybersecurity Engineer specializing in Privileged Access Management (PAM) and Secrets Management will design, implement, and support PAM and Secret lifecycle solutions across hybrid cloud environments from an onsite location in Buffalo, NY.

Responsibilities

Design, implement, administer, and optimize enterprise PAM solutions to enforce least privilege and secure privileged access.
Manage credential vaulting, privileged session control, access policy enforcement, credential rotation, and audit logging.
Implement and support secrets management using Azure Key Vault for secure storage and lifecycle management of application secrets, certificates, and encryption keys.
Develop and maintain controls that enable just-in-time access, credential rotation, and continuous privileged session monitoring.
Ensure PAM deployments comply with security, compliance, audit, and regulatory requirements.
Integrate PAM and secrets management capabilities into CI/CD pipelines and modern DevOps workflows.
Develop automation with PowerShell, REST APIs, and other scripting technologies to streamline onboarding, credential management, provisioning, and lifecycle operations.
Create reusable automation for onboarding privileged accounts, password rotation, access workflows, and platform integrations.
Collaborate with DevOps, cloud, and application development teams to embed security controls into cloud-native and enterprise applications.
Design and support secure PAM integrations across hybrid infrastructure including Windows, Linux, Active Directory, Entra ID, and Microsoft Azure.
Support a highly available, resilient, and scalable PAM platform architecture.
Implement authentication, authorization, logging, monitoring, and security controls across enterprise environments.
Troubleshoot complex identity and privileged access issues while maintaining operational excellence.
Partner with infrastructure, identity, cloud, application, and security teams to strengthen privileged access security.
Participate in security architecture reviews and advise on improvements to privileged access controls.
Support internal and external audits by providing documentation, reporting, and evidence of security controls.
Develop operational procedures, standards, and technical documentation for PAM services.

Requirements

This opportunity is not open to C2C relationships or visa sponsorship.
Local candidates only.
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or equivalent professional experience.
Demonstrated expert-level experience designing, implementing, and supporting Privileged Access Management and Secrets Management solutions within large enterprise environments.
Strong hands-on experience with CyberArk Privileged Access Management, including:
- Credential vaulting
- Privileged session management
- Access policy management
- Credential lifecycle automation
- Audit logging
Experience implementing and administering Azure Key Vault.
Experience automating security processes using PowerShell and REST APIs.
Solid understanding of least privilege, privileged identity security, credential rotation, and privileged access governance.
Experience supporting Windows and Linux server environments.
Strong knowledge of Active Directory and Microsoft Entra ID.
Experience integrating security controls into DevOps and CI/CD pipelines.
Excellent analytical, troubleshooting, communication, and collaboration skills.

Technologies

CyberArk
Azure Key Vault
PowerShell
REST APIs
Active Directory
Microsoft Entra ID
Microsoft Azure
Windows
Linux
GitLab
Ansible
CyberArk Cloud or DevOps Extensions (CDE)

Preferred Qualifications

Experience with CyberArk Cloud or DevOps Extensions (CDE).
Experience with GitLab and Ansible.
Experience integrating PAM solutions with cloud-native applications and infrastructure.
Experience supporting highly regulated environments such as financial services, healthcare, or government.
Knowledge of enterprise authentication, authorization, logging, monitoring, and security architecture best practices.
Industry certifications such as CyberArk Defender/Sentry, Microsoft Azure Security, CISSP, Security+ or related credentials are preferred.

View full job page →

11d ago

Senior Consultant, Strategy, Growth, and Transformation, Identity & Gen AI Engineer

Deloitte Arlington, VA

Arlington, VA

11d ago

$105k - $208k/yr Full time Senior Agentic Ai Artificial Intelligence

Apply Now

Job Description

Senior Consultant, Identity & Gen AI Engineer on Deloitte's Identity and Access Management team, onsite in Arlington, VA, building secure generative AI solutions with identity, access, and governance engineered in from the start.

Responsibilities

Build and integrate generative AI solutions, including LLM applications, retrieval-augmented generation, and AI agents, with secure access to data and downstream systems.
Engineer authentication, authorization, and identity controls for AI agents, service accounts, and other non-human identities operating across enterprise and cloud environments.
Develop guardrails for agentic workflows, including scoped permissions, least-privilege access, credential and secrets management, and runtime policy enforcement.
Implement logging, monitoring, and governance that provide traceability and accountability for AI system actions.
Collaborate with IAM, security architecture, and data teams to embed identity controls into GenAI solution delivery and operations.
Create and maintain reference architectures, reusable patterns, and technical documentation for building and securing AI systems.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a similar technical field
Ability to work onsite up to 5 days a week
3+ years of software engineering experience with Python or a comparable language
1+ year of hands-on experience building, integrating, or deploying generative AI solutions such as large language model applications, retrieval-augmented generation, or AI agents, including use of model APIs, orchestration frameworks, and AI development tools such as Claude Code, OpenAI Codex, GitHub Copilot, or Cursor
Working knowledge of identity and access management concepts and protocols, including authentication, authorization, single sign-on, and standards such as OpenID Connect, SAML, OAuth, and JSON Web Token
Ability to travel 15 percent on average, based on client and engagement needs
Ability to obtain and maintain the necessary security clearance
Must be legally authorized to work in the United States without the need for employer sponsorship now or in the future

Technologies

Python
Claude Code
OpenAI Codex
GitHub Copilot
Cursor
LangChain
LangGraph
Model Context Protocol
Open Policy Agent
Cedar
OpenFGA
SailPoint
Okta
Microsoft Entra ID
HashiCorp Vault
CyberArk
Terraform
Ansible
AWS
Microsoft Azure
OpenID Connect
SAML
OAuth
JSON Web Token

Benefits

Discretionary annual incentive program

Team

Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.
Our Digital Trust & Privacy offering enables trust and safety of online communications and digital products, protecting users, consumers, and patients from harm. Enables clients to provide consumer confidence in knowing with whom they are dealing and ensuring the integrity of access to data.

View full job page →

12d ago

Cybersecurity Engineer

All In Solutions Remote 🌍 Remote

Remote

12d ago

Up to $150k/yr Full time Application Security Aws Govcloud Cloud

Apply Now

Job Description

This remote cybersecurity engineering role centers on implementing, validating, and maintaining security controls for a complex, mission-critical cloud platform hosted in AWS GovCloud. The position integrates security into the DevSecOps workflow, enforces Zero Trust Architecture, and ensures ongoing compliance with NIST, FISMA, FIPS, HIPAA, and VA requirements across diverse environments and authorization boundaries.

Overview

The role focuses on shaping and sustaining robust security practices across all platform environments, guiding secure development, deployment, and operation within a federal or enterprise cloud context.

Responsibilities

Apply and sustain NIST security controls per the approved baseline across every platform environment.
Incorporate SAST, DAST, SCA, container scanning, and Infrastructure as Code scanning into CI/CD workflows.
Remediate vulnerabilities within government-defined timelines identified through scanning activities.
Enforce secure coding standards and approved dependency management across all development activities.
Implement and maintain Zero Trust Architecture principles and least-privilege access across all platform components and tenant boundaries.
Configure and manage container security, including image signing, vulnerability scanning, runtime protection, and registry security.
Operate centralized secrets management with automated rotation for production secrets where automation is supported.
Support zero-trust and least-privilege practices in pipeline and deployment configurations.
Validate security control effectiveness through automated testing, configuration validation, and periodic assessments.
Assist with penetration testing, red team activities, and independent security assessments as required.
Implement and maintain encryption in transit and at rest across data flows, storage, and backups using FIPS 140-3 validated modules.
Configure per-region KMS keys for multi-region deployments to ensure compartmentalization of data confidentiality.
Support cybersecurity incident response activities in coordination with VA security operations, including forensic analysis, root cause determination, and corrective action planning.
Establish and maintain firewall configurations, security group definitions, and network access controls per VA security policies.
Support continuous monitoring activities, including configuration validation, security event correlation, and anomaly detection.
Ensure all platform components comply with VA Critical Security Controls and are authorized before connecting to the VA network.
Support FICAM requirements including PIV-based authentication, automated provisioning, and Identity/Authenticator/Federation Assurance Level compliance.
Contribute to security documentation such as Security Impact Assessments, Information System Vulnerability Management Plans, Security Assessment Plans, and Security Assessment Reports.
Participate in security audits and assessments, providing technical evidence, documentation, and remediation support.
Engage in Agile and SAFe ceremonies, including sprint planning, backlog refinement, demos, and retrospectives.

Qualifications and Requirements

Proven cybersecurity engineering experience for complex, mission-critical cloud platforms in federal or enterprise environments.
Hands-on experience implementing security controls in AWS cloud environments, including EKS, IAM, KMS, security groups, VPC security, and encryption services.
Experience integrating SAST, DAST, SCA, and container scanning tools into CI/CD pipelines.
Deep knowledge of Zero Trust Architecture principles and practical implementation.
Experience with container security, including image scanning, runtime protection, and Kubernetes security policies.
Hands-on experience with secrets management tools such as AWS Secrets Manager, HashiCorp Vault, and Kubernetes secrets.
Knowledge of FIPS 140-3 cryptographic requirements and their cloud-based implementations.
Experience implementing and validating NIST SP 800-53 Rev. 5 security controls.
Familiarity with penetration testing, red team methodologies, and vulnerability remediation practices.
Experience with incident response, including forensic analysis, evidence collection, and corrective action development.
Knowledge of federal identity and access management requirements including FICAM, PIV, and multi-factor authentication.
Experience with firewall configuration, network security, and secure external connections in federal cloud environments.
Knowledge of HIPAA, Privacy Act, FISMA, and federal data protection requirements.
Experience working in Agile or SAFe environments with sprint-based delivery cadences.
CISSP, CEH, GIAC, or equivalent cybersecurity certification required.
AWS Security Specialty or equivalent cloud security certification is preferred.
Certified Kubernetes Security Specialist (CKS) or equivalent certification is preferred.
Educational background: Bachelor's Degree required with a minimum of 5 years in cybersecurity engineering, including at least 2 years implementing security controls for cloud-native platforms in federal or enterprise IT environments. An Associate's Degree with at least 7 years of experience and 3 years implementing cloud-native security controls in similar settings is also acceptable.

Technologies

AWS GovCloud
AWS EKS, AWS IAM, AWS KMS
AWS Secrets Manager
HashiCorp Vault
Kubernetes and Kubernetes secrets
SAST, DAST, SCA
Infrastructure as Code scanning
SNOWCAM, TRM, BPE
FIPS 140-3
PIV-based authentication

Benefits

Experience with Department of Veterans Affairs security programs
Active Personal Identity Verification (PIV) card
Familiarity with VA Critical Security Controls and VA Handbook 6500 security requirements
Experience implementing security controls across multi-tenant authorization boundaries
Proficiency with VA-specific tools and governance processes including SNOWCAM, TRM, and BPE

Compensation

Up to USD 150,000 per year

Experience

Minimum experience: 5 years in cybersecurity engineering. This includes at least 2 years implementing security controls for cloud-native platforms within federal or enterprise IT environments.

Work Location

Remote

View full job page →

12d ago

Application Security Engineer

Wolfe, LLC Pittsburgh, PA

Pittsburgh, PA

12d ago

$110k - $120k/yr Full time Api Security Application Security Bot Management

Apply Now

Job Description

Application Security Engineer role with Wolfe, LLC in Pittsburgh, PA, onsite five days per week.

Responsibilities

Conduct code reviews, SAST/DAST testing, basic penetration testing, and lightweight threat modeling, collaborating with developers to remediate vulnerabilities across application code, libraries, containers, and infrastructure as code.
Integrate and operate automated security tooling (for example Snyk, SemGrep, Cycode) within CI/CD pipelines across code repositories such as GitHub, GitLab, Jenkins, and AWS DevOps, and assist with triage and reporting of findings.
Oversee vulnerability management programs, scanning tools, and the enterprise Bug Bounty program, tracking and prioritizing remediation against defined SLAs.
Support Bot Management, Web Application Firewall, secrets management, and API security controls across Wolfe's applications.
Promote secure coding standards aligned with OWASP and SANS CWE Top 25, and contribute to measuring DevSecOps maturity using DSOMM or BSIMM.
Collaborate with developers, security operations, product management, and incident response teams, sharing secure-coding and vulnerability-management practices while expanding personal expertise.

Requirements

Minimum 2 years of experience in application security, DevSecOps, or security-exposed software development, including developers transitioning into security roles; Bachelor's degree in Information Security, Cybersecurity, Computer Science, or a related field (equivalent experience accepted).
Strong coding background with working knowledge of secure coding principles (OWASP Top 10, SANS CWE Top 25).
Hands-on exposure to CI/CD pipelines (GitHub, GitLab, Jenkins, AWS DevOps) and interest in embedding security tooling into those workflows.
Excellent verbal and written communication skills, capable of explaining security concepts to technical and non-technical teammates.
Willingness to learn enterprise security tooling (vulnerability scanners, Bot Management, SAST/DAST/SCA) and maturity frameworks such as DSOMM or BSIMM; prior experience is a plus but not required.
No mandatory certifications; familiarity with CISSP, OSCP, GCSA, AWS Security Specialty, or CSSLP is a plus, and Wolfe will support pursuing them.

Technologies

Snyk
SemGrep
Cycode
GitHub
GitLab
Jenkins
AWS DevOps
DSOMM
BSIMM
OWASP Top 10
SANS CWE Top 25
SAST
DAST
SCA
Bot Management
WAF

Benefits

Restricted Stock Units (RSUs)
Profit Share and/or Incentive Bonus
Medical, Prescription, Vision, and Dental insurance for employees and dependents (Wolfe pays 80% of the premium)
Short-Term Disability Insurance (Wolfe pays 100% of the premium)
Voluntary Long-Term Disability Insurance, Life Insurance, Critical Illness Insurance, Accident Insurance, and Hospital Indemnity coverage
PTO (vacation and sick time)
Corporate Holidays and Floating Holidays
401(k)
Employee recognition program
Charitable donation to a charity of your choice yearly
Employee referral bonus
Tuition reimbursement
Internal training and information sessions
Family Picnic, Holiday Party, and other outings
Internal Culture Club

Impact Statement

Update the existing Application Security Strategy and improve monitoring and KPI reporting
Deliver a significant improvement to at least one automated security tool in the production CI/CD pipeline and establish a documented triage workflow
Drive additional Bug Bounty submissions and strengthen bot management protections before the end of Q3
Provide product and technology advisement and testing for new application and AI functionality
Develop and plan a targeted Application and AI development training program

View full job page →

Secret Management Engineer Jobs

Cybersecurity Engineer - PAM

Senior Consultant, Strategy, Growth, and Transformation, Identity & Gen AI Engineer

Cybersecurity Engineer

Application Security Engineer

Get Secret Management Engineer Jobs alerts