Key Responsibilities:
Secrets Management & Platform Administration:
- Install, configure, and administer CyberArk Conjur Open Source/Enterprise.
- Manage secret injection mechanisms for applications, services, and CI/CD pipelines.
- Set up and maintain policies, roles, permissions, and authentication layers (e.g., LDAP, Kubernetes, AWS IAM).
- Rotate, revoke, and audit secrets across systems and services.
Cloud & DevOps Integration:
- Integrate Conjur with CI/CD tools (e.g., Jenkins, GitLab, GitHub Actions).
- Implement secret management in cloud-native and containerized environments (AWS, Azure, GCP, Kubernetes, OpenShift).
- Collaborate with DevOps teams to secure automated workflows and deployments.
- Enable applications to securely retrieve credentials using API or sidecar containers.
Security & Compliance:
- Maintain audit trails, logs, and reports for compliance and incident response.
- Ensure best practices for least privilege access and Zero Trust architecture.
- Support security assessments and penetration testing activities involving secret access.
Required Skills & Qualifications:
- Hands-on experience with CyberArk Conjur (Open Source or Enterprise).
- Proficiency in managing secrets lifecycle: generation, rotation, expiration, and revocation.
- Experience with Linux/Unix administration, shell scripting, and RESTful APIs.
- Familiarity with IAM concepts, LDAP, RBAC, TLS/SSL, and PKI.
- Experience working with DevOps tools like Docker, Kubernetes, Jenkins, Ansible, Terraform, etc.
- Understanding of network and application security principles.
- Strong problem-solving and documentation skills.
Preferred Qualifications:
- CyberArk or relevant security certifications (e.g., CyberArk Defender/Conjur Certified).
- Knowledge of other secrets management tools (e.g., HashiCorp Vault, AWS Secrets Manager).
- Experience in regulated environments (e.g., financial services, healthcare) with compliance standards like SOC 2, HIPAA, ISO 27001.
