Cybersecurity PAM / Secrets Management Engineer L3

Role :- Cybersecurity PAM / Secrets Management Engineer L3(Hashi Corp Vault experience is must)

Location : Santa Clara, CA & Austin, TX(Onsite)

Mode : Contract

Years of Experience

10+ years of L3 Engineer responsible for solution design, platform configuration, secrets-engine and authentication integration, policy development, migration, testing, and production deployment.

Hand-on Experience in HashiCorp Vault and CyberArk.

General Description

Design, develop, and implement secure secrets management and privileged access managment solutions using HashiCorp Vault and CyberArk, supporting enterprise security and DevSecOps initiatives.

Collaborate with application, infrastructure, cloud, and security teams to integrate Vault with business applications, CI/CD pipelines, cloud services, and enterprise authentication platforms.

Develop automation, APIs, custom integrations, and reusable solutions to enhance credential management, access control, and security operations across hybrid environments.

Produce technical documentation, solution designs, architecture diagrams, implementation guides, and operational procedures while supporting project delivery and platform enhancements.

Technical Requirements

Strong experience implementing and managing HashiCorp Vault Enterprise/Open Source, including authentication methods, secrets engines, policies, namespaces, replication, and access control models.

Should be capable of deploying, installing, and configuring CyberArk components (Vault, CPM, PVWA, PSM, PSMP, AIM/CCP) as per client requirements.

Develop custom plugins, integrations, and connectors for CyberArk CPM/PSM Password Safe/PRA components, as required.

Hands-on experience developing integrations with HashiCorp Vault using REST APIs, Vault SDKs, CLI tools, and automation frameworks.

Strong programming and scripting skills in Python, Java, Go, PowerShell, Shell Scripting, or JavaScript.

Experience developing custom solutions for application secrets management, dynamic secrets, token management, certificate lifecycle management, and encryption services.

Strong understanding of authentication and federation protocols including OAuth 2.0, OpenID Connect (OIDC), SAML, LDAP, Active Directory, and JWT-based authentication.

Experience integrating Vault with enterprise IAM platforms, cloud identity providers, and authentication services.

Hands-on experience with Terraform, Ansible, Git, Jenkins, GitHub Actions, Azure DevOps, or similar automation and CI/CD tools.

Experience integrating HashiCorp Vault with Kubernetes, Docker, OpenShift, and containerized environments.

Strong understanding of cloud platforms including AWS, Microsoft Azure, and Google Cloud Platform (GCP) and their native secrets and identity services.

Experience implementing secure API authentication, authorization, and secrets injection mechanisms for web, mobile, and enterprise applications.

Working knowledge of databases such as SQL Server, Oracle, PostgreSQL, MySQL, and experience configuring Vault dynamic database credentials.

Experience with high availability, disaster recovery, replication, backup strategies, performance tuning, and operational resilience for Vault deployments.

Strong understanding of cybersecurity principles including least privilege, zero trust, privileged access, secrets management, encryption, PKI, and certificate management.

Experience supporting the full Software Development Lifecycle (SDLC), including requirements analysis, development, testing, deployment, troubleshooting, and production support.

Ability to create technical specifications, workflow diagrams, architecture documents, and implementation runbooks.

Experience troubleshooting complex Vault, authentication, API integration, and secrets management issues in enterprise environments.

Familiarity with security monitoring, vulnerability assessment, and compliance frameworks such as NIST, CIS, ISO 27001, PCI-DSS, SOX, and GDPR.

Soft Skills

Strong oral and written communication skills.

Exceptional problem-solving and analytical abilities.

Excellent organizational and time management skills.

Commitment to maintaining a high degree of accuracy.

Strong collaboration and leadership skills.

Being adaptable and a dedication to continual learning.

Customer-focused approach with a commitment to providing outstanding service.

Certifications (Good to Have)

HashiCorp Certified: Vault Operations Professional

HashiCorp Certified: Terraform Associate

Educational Qualifications

University degree in B.Tech or IT.