Secrets Management Platform Engineer (AWS/CyberArk)

Location: 100% Remote

Company

hirify.global is a fast-growing technology company recognized by Best Places to Work and the Inc. 5000.

What you will do

• Design, implement, and operate a centralized enterprise secrets management platform using CyberArk or HashiCorp Vault.
• Onboard applications, services, users, and machine identities while automating credential provisioning, retrieval, rotation, revocation, and retirement.
• Integrate AWS Secrets Manager, AWS Systems Manager Parameter Store, AWS KMS, CI/CD pipelines, DevSecOps workflows, containers, and Kubernetes workloads.
• Implement least-privilege IAM policies, Zero Trust controls, dynamic credentials, and identity-based access for users, applications, and workloads.
• Maintain PKI and certificate lifecycle processes, including issuance, renewal, rotation, revocation, and expiration monitoring.
• Develop auditing, monitoring, governance, documentation, onboarding procedures, and operational runbooks while troubleshooting platform integrations.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related technical discipline.
• Experience implementing or administering CyberArk or HashiCorp Vault, plus AWS Secrets Manager, AWS Systems Manager Parameter Store, and AWS KMS.
• Strong knowledge of IAM, role-based and policy-based access, least privilege, Zero Trust, credential rotation, dynamic secrets, and machine identity.
• Hands-on automation experience with Python, Terraform, and/or Ansible, including integration with CI/CD and DevSecOps workflows.
• Experience with PKI, certificate management, encryption, key management, Kubernetes, container security, centralized logging, monitoring, auditing, and compliance reporting.
• Knowledge of FIPS 140-2/3 validated cryptography and controls for eliminating hard-coded credentials and unmanaged secrets.

Nice to have

• Experience supporting AWS GovCloud, government, defense, or other regulated cloud environments.
• AWS Certified Security – Specialty or AWS Certified Solutions Architect – Associate.
• HashiCorp Certified: Vault Associate, CyberArk Defender/Sentry, CISSP, or CISM certification.

Culture & Benefits

• Fully remote workplace.
• People-first approach focused on excellence and continuous improvement.
• Work on security, automation, scalability, compliance, and operational resilience for enterprise environments.