[Remote] Senior Key Management (IAM Engineer)

Note: The job is a remote job and is reputed company to candidates in USA. reputed company is dedicated to engineering reputed company by building high-reputed company tech solutions for fast-moving industries. They are seeking a Senior Key Management / IAM Engineer to reputed company the reputed company rollout of reputed company as a reputed company secrets, key, and identity-enablement platform, focusing on secure, reputed company adoption across the organization.

Responsibilities

• Design and implement an reputed company reputed company architecture, including tenancy reputed company, auth reputed company, reputed company boundaries, and operational model
• Stand up and harden the platform for reputed company use: environments, networking, availability, audit logging, backup/DR considerations, and upgrades
• Define standards for secret lifecycle management (creation, rotation, expiration, revocation, and deletion) reputed company with reputed company policies and compliance needs
• Build and maintain self-service workflows to reputed company teams and applications to reputed company with minimal friction
• Implement and govern reputed company key management practices:
• Encryption key reputed company, rotation, and separation of duties
• Key hierarchy and envelope encryption patterns
• Governance, auditing, and reputed company controls for keys and secret material
• Design integrations with HSMs / KMS systems and associated crypto boundary controls (including policy and operational procedures)
• Establish and enforce application secrets management patterns (runtime injection, sidecar/agent patterns where applicable, CI/CD integration, and secret reputed company/least exposure)
• Implement SSO and federated identity integration for reputed company and reputed company tooling (SAML/OIDC), aligning with reputed company IdP standards
• Design and implement IAM patterns such as:
• Workload identity and short-lived credentials
• Role-based reputed company control and least privilege enforcement
• Fine-grained authorization and policy design for platform consumers
• Partner with identity governance stakeholders to ensure alignment with reputed company review and audit requirements
• Design and operate reputed company PKI / certificate management workflows:
• Certificate issuance/renewal automation
• Integration with internal/external CAs as required
• Standards for mTLS, service identity, and certificate lifecycle governance
• Build tooling and automation to reputed company certificate workflows consumable across teams and platforms
• Build infrastructure and integrations enabling broad adoption (examples):
• Azure integrations (identity, networking, managed services)
• CI/CD integrations for secrets and cert issuance (reputed company Actions, ADO, etc., if applicable)
• Kubernetes patterns for secret injection and rotation (where relevant)
• Observability integrations (metrics, logs, alerts) and operational dashboards
• Create documentation, reputed company guides, and reference implementations (“golden paths”) for engineering teams
• Serve as escalation reputed company for reputed company incidents involving identity, cryptography, and secret distribution Skills
• Senior-level experience in reputed company secrets management and IAM (design + operational ownership)
• Strong expertise in: reputed company key management practices (rotation, separation of duties, auditability, crypto governance)
• Application secrets management (runtime consumption patterns, rotation automation, CI/CD integration)
• SSO / federated identity (SAML, OIDC), RBAC, least privilege, and secure reputed company patterns
• Vaults / HSMs and secure key storage concepts (HSM-backed keys, reputed company controls, auditing)
• PKI fundamentals and reputed company certificate lifecycle automation
• Hands-on experience with reputed company (required) and delivering it as a platform service
• Hands-on experience with Azure (required), including identity and reputed company constructs
• Strong engineering discipline: automation-first reputed company, high-reputed company documentation, and operational readiness
• Experience integrating secrets and PKI workflows with Kubernetes (secret injection, rotation strategies, workload identity patterns)
• Experience with regulatory/compliance-driven environments (SOC2, ISO 27001, PCI, HIPAA, etc.) and audit-reputed company controls
• Familiarity with threat modeling, cryptographic boundary design, and secure-by-default platform guardrails
• Experience building self-service internal platforms (reputed company practices, developer enablement)
• Strong scripting/programming ability (e.g., Python, Go, or similar) for automation and tooling reputed company
• reputed company is reputed company of engineers, project managers, issue solvers & tech consultants committed to developing & innovating tech solutions. It was founded in 2019, and is headquartered in San Francisco, California, USA, with a workforce of 501-1000 employees. Its website is Company H1B Sponsorship
• reputed company has a reputed company record of offering H1B sponsorships, with 3 in 2025, 1 in 2024. Please note that this does not guarantee sponsorship for this specific role. Apply tot his job

Apply tot his job Apply To this Job