Senior PKI, HashiCorp Operations Engineer

This is a fully remote position, open to applicants in California, +12 more states.

📋 Description

• Provide ongoing DevSecOps and Operations support for a global secrets management service utilizing Certificate Lifecycle Management and PKI solutions, along with various data protection technologies.

• Offer continuous DevSecOps and Operations support for a global Information Security Cryptography Services program, encompassing encryption, key and secrets management, tokenization, and various data protection technologies.

• Act as one of several technical leads within a team of secrets management engineers.

• Contribute to the creation, editing, provision, or review of documentation (procedures, standards) to ensure a well-managed and mature security infrastructure.

• Engage actively in the engineering, implementation, and operations of security measures that safeguard computer systems, networks, and information.

• Assist in disaster recovery planning and operations, including data backups when necessary.

• Administer and support infrastructure related to API, application security, firewalls, encryption, intrusion detection systems, PKI, secrets management, vulnerability scanning, security monitoring tools, penetration testing, authentication, web filtering, identity management, or access control systems, along with associated logs and processes.

• Collaborate closely with the Information Security program manager, scrum master, and architects to communicate technical impacts on development and engineering timelines and associated risks.

• Independently identify opportunities to enhance operational or performance metrics for Security, Information Technology, and other functions across Synchrony.

• Partner with Information Security Architects, Engineers, and API developers to facilitate program delivery.

• Collaborate with Information Security leaders to advance the development of secrets management and standards across the organization.

• Serve as a subject matter expert to team members within the Information Security organization.

• Execute additional duties and/or special projects as assigned.

• Conduct Certificate Management activities, which include:

• o Management of Certificate/Key Lifecycles (e.g., SSH, TLS Certificates).

• o Development of Certificate/Key Management Policies, Processes, and Templates.

• o Documentation (Administrative & Technical).

• o Assistance with User Issues related to Certificates/Key Management Services.

• o Metrics, Monitoring, and Reporting.

• o Fulfillment and Queue Management.

• o Management of PKI Infrastructure.

• o Reviews of PKI Performance/SLA with Stakeholders.

⛳️ Requirements

• Bachelor's degree in Computer Science/Engineering or a related field, OR a High School Diploma/GED with a minimum of 4 years of experience in Technology, including at least 5 years in Information Security.

• Over 5 years of experience in PKI and HashiCorp Operations.

• Hands-on capability to lead and drive remote offshore teams and deliverables.

• Strong experience in customer management.

• Delivery-focused individual with the ability to solve complex problems and implement effective solutions.

• Preferred certifications in audit, big data, cloud, cybersecurity, governance, information security, privacy, and risk; such as AWS, Cloudera, GCP, GIAC, ISC2, ISACA.

• Exceptional oral communication and writing skills.

• Proficient in presenting complex topics, influencing decisions, and executing with timely, actionable follow-through.

• Strong hands-on technical expertise with API, AWS, Cloudera, Docker, encryption, HashiCorp Vault, Kubernetes, Java, Linux, Perl, PKI, Protegrity, Python, secrets management, Thales/Vormetric, and tokenization is highly preferred.

• Proven ability to organize and manage multiple priorities, along with the flexibility to adapt to changing business needs swiftly.

• Strong analytical and problem-solving abilities, with the capacity to translate information into practical deliverables.

• Utilizes rigorous logic and methods to tackle difficult problems.

• Capability to manage multiple projects simultaneously.

• Background in DevOps, Engineering, and/or Operations.

• Creative and independent thinker, able to work both collaboratively and autonomously.

• Familiarity with problem and incident management, change management, notifications, and a basic operational understanding of running and maintaining infrastructure.

• Excellent teamwork skills, along with strong oral and written communication abilities.

• Comprehensive understanding of the security landscape as a whole.

• Strong and efficient problem-solving and analytical skills, with a willingness to learn.

• Experience with modern coding languages such as Python.

• Experience in API development.

• Experience with CI/CD pipelines.

• Experience with Cryptography Management technologies.

• Experience with Jenkins.

• Experience with PKI, including CLM technologies.

• Experience with secrets management technologies.

• Experience with tokenization technologies.

• Understanding of various cloud deployment/service models from development, infrastructure, and information security perspectives.

🏝️ Benefits

• Paid time off based on employee grade (A-F), as defined by policy: Vacation: 12-25 days, depending on grade.

• Company-paid holidays.

• Personal Days.

• Sick Leave.

• Medical, dental, and vision coverage (or provincial healthcare coordination in Canada).

• Retirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada).

• Life and disability insurance.

• Employee assistance programs.

• Additional benefits as provided by local policy and eligibility.