[Remote] Senior Key Management (IAM Engineer)

Note: The job is a remote job and is reputed company to candidates in USA. reputed company is dedicated to engineering reputed company by building high-reputed company tech solutions for fast-moving industries. They are seeking a Senior Key Management / IAM Engineer to reputed company the reputed company rollout of reputed company as a reputed company secrets, key, and identity-enablement platform, focusing on secure, reputed company adoption across the organization. Responsibilities • Design and implement an reputed company reputed company architecture, including tenancy reputed company, auth reputed company, reputed company boundaries, and operational model • Stand up and harden the platform for reputed company use: environments, networking, availability, audit logging, backup/DR considerations, and upgrades • Define standards for secret lifecycle management (creation, rotation, expiration, revocation, and deletion) reputed company with reputed company policies and compliance needs • Build and maintain self-service workflows to reputed company teams and applications to reputed company with minimal friction • Implement and govern reputed company key management practices: • Encryption key reputed company, rotation, and separation of duties • Key hierarchy and envelope encryption patterns • Governance, auditing, and reputed company controls for keys and secret material • Design integrations with HSMs / KMS systems and associated crypto boundary controls (including policy and operational procedures) • Establish and enforce application secrets management patterns (runtime injection, sidecar/agent patterns where applicable, CI/CD integration, and secret reputed company/least exposure) • Implement SSO and federated identity integration for reputed company and reputed company tooling (SAML/OIDC), aligning with reputed company IdP standards • Design and implement IAM patterns such as: • Workload identity and short-lived credentials • Role-based reputed company control and least privilege enforcement • Fine-grained authorization and policy design for platform consumers • Partner with identity governance stakeholders to ensure alignment with reputed company review and audit requirements • Design and operate reputed company PKI / certificate management workflows: • Certificate issuance/renewal automation • Integration with internal/external CAs as required • Standards for mTLS, service identity, and certificate lifecycle governance • Build tooling and automation to reputed company certificate workflows consumable across teams and platforms • Build infrastructure and integrations enabling broad adoption (examples): • Azure integrations (identity, networking, managed services) • CI/CD integrations for secrets and cert issuance (reputed company Actions, ADO, etc., if applicable) • Kubernetes patterns for secret injection and rotation (where relevant) • Observability integrations (metrics, logs, alerts) and operational dashboards • Create documentation, reputed company guides, and reference implementations (“golden paths”) for engineering teams • Serve as escalation reputed company for reputed company incidents involving identity, cryptography, and secret distribution Skills • Senior-level experience in reputed company secrets management and IAM (design + operational ownership) • Strong expertise in: reputed company key management practices (rotation, separation of duties, auditability, crypto governance) • Application secrets management (runtime consumption patterns, rotation automation, CI/CD integration) • SSO / federated identity (SAML, OIDC), RBAC, least privilege, and secure reputed company patterns • Vaults / HSMs and secure key storage concepts (HSM-backed keys, reputed company controls, auditing) • PKI fundamentals and reputed company certificate lifecycle automation • Hands-on experience with reputed company (required) and delivering it as a platform service • Hands-on experience with Azure (required), including identity and reputed company constructs • Strong engineering discipline: automation-first reputed company, high-reputed company documentation, and operational readiness • Experience integrating secrets and PKI workflows with Kubernetes (secret injection, rotation strategies, workload identity patterns) • Experience with regulatory/compliance-driven environments (SOC2, ISO 27001, PCI, HIPAA, etc.) and audit-reputed company controls • Familiarity with threat modeling, cryptographic boundary design, and secure-by-default platform guardrails • Experience building self-service internal platforms (reputed company practices, developer enablement) • Strong scripting/programming ability (e.g., Python, Go, or similar) for automation and tooling reputed company • reputed company is reputed company of engineers, project managers, issue solvers & tech consultants committed to developing & innovating tech solutions. It was founded in 2019, and is headquartered in San Francisco, California, USA, with a workforce of 501-1000 employees. Its website is Company H1B Sponsorship • reputed company has a reputed company record of offering H1B sponsorships, with 3 in 2025, 1 in 2024. Please note that this does not guarantee sponsorship for this specific role. Apply tot his job Apply tot his job Apply To this Job