Security Consultant

This is a fully remote position, open to applicants in Mexico.

📋 Description

• Design, implement, and maintain CyberArk Conjur platforms.

• Integrate Conjur with Kubernetes, CI/CD pipelines, and various cloud platforms.

• Execute secrets injection patterns and oversee Conjur YAML policies for RBAC and least privilege.

• Automate the onboarding process for applications and services into Conjur.

• Implement and provide support for Conjur followers, clustering, and high availability.

• Assist with CyberArk Digital Vault, CPM, PVWA, and PSM components.

• Manage onboarding and lifecycle processes for privileged accounts.

• Troubleshoot platform-related issues, performance bottlenecks, and outages.

• Engage in upgrades, patching, and disaster recovery testing.

• Develop automation scripts and integrate secrets management within DevSecOps pipelines.

• Create reusable templates and modules for secure application onboarding.

• Support Infrastructure as Code initiatives utilizing Terraform, CloudFormation, and ARM templates.

• Serve as Tier 2 / Tier 3 escalation for CyberArk and Conjur-related issues.

• Monitor platform health, logs, and audit events.

• Maintain operational procedures and runbooks.

• Assist in incident response and root cause analysis.

• Enforce principles of least privilege and zero-trust.

• Support SOX, PCI, and other audit and compliance initiatives.

• Implement credential rotation and manage secrets lifecycle.

• Collaborate with IAM, DevOps, and Security teams on secure architecture.

• Drive Conjur adoption, enhance automation, improve platform stability, and facilitate secure DevOps practices.

⛳️ Requirements

• 4–8+ years of experience with CyberArk PAM solutions.

• 2–5+ years of practical experience with CyberArk Conjur.

• A minimum of 3–5 years’ experience with OCI-compliant container runtimes for Docker and Podman images.

• Strong expertise in Kubernetes and container platforms.

• Experience in designing and setting up Docker and Podman image platforms.

• Familiarity with CI/CD tools and DevOps methodologies.

• Experience in Linux administration.

• Scripting and automation skills in Python, PowerShell, or Bash.

• Knowledge of secrets management principles.

• Understanding of API authentication methods, including OAuth and JWT.

• Awareness of network and security fundamentals.

• Experience with Conjur Enterprise and Secrets Manager (AAM) is preferred.

• Familiarity with service mesh and microservices security is preferred.

• Cloud certifications for AWS, Azure, or GCP are preferred.

• CyberArk certifications such as Defender or Sentry are preferred.

• Experience with machine identity management platforms like Venafi is preferred.

• Strong troubleshooting and problem-solving abilities.

• Ability to collaborate cross-functionally with DevOps and Security teams.

• Excellent communication skills, both technical and non-technical.

• Self-motivated individual capable of thriving in project and BAU environments.

🏝️ Benefits

• Diversity and inclusion are integral to Atos’s culture.

• Commitment to fostering a fair work environment.

• Opportunity to work on secure and sustainable digital transformation initiatives.