- Location
- 100% Remote
- Workplace
- Remote
- Type
- Full-time
- Department
- Engineering & Architecture
- Education
- Master
- Source
- Lever
Description
The Secrets Management Platform Engineer designs, implements, and operates a centralized enterprise secrets management platform that securely manages credentials, keys, certificates, tokens, and other sensitive authentication material across applications, services, cloud environments, and CI/CD workflows.
This role is responsible for onboarding thousands of applications and services into the secrets management platform; automating credential provisioning, retrieval, and rotation; integrating secrets management into DevSecOps and cloud-native workloads; enforcing least-privilege access; and maintaining compliance through auditing, monitoring, policy enforcement, and lifecycle governance.
The engineer will support AWS GovCloud and Zero Trust requirements by eliminating hard-coded credentials, implementing strong identity-based access controls, using FIPS 140-2/3 validated cryptography, and integrating with AWS KMS and approved secrets-management services.