Role Overview:
We are looking for a skilled Conjur Admin to manage and maintain our secrets management infrastructure using CyberArk Conjur. The role is critical to ensuring secure credential storage, access policies, and integrations across development, operations, and cloud environments. The ideal candidate will have a strong background in DevSecOps, cloud security, and infrastructure automation.
Key Responsibilities:
- Secrets Management & Platform Administration:
- Install, configure, and administer CyberArk Conjur Open Source/Enterprise.
- Manage secret injection mechanisms for applications, services, and CI/CD pipelines.
- Set up and maintain policies, roles, permissions, and authentication layers (e.g., LDAP, Kubernetes, AWS IAM).
- Rotate, revoke, and audit secrets across systems and services.
- Cloud & DevOps Integration:
- Integrate Conjur with CI/CD tools (e.g., Jenkins, GitLab, GitHub Actions).
- Implement secret management in cloud-native and containerized environments (AWS, Azure, GCP, Kubernetes, OpenShift).
- Collaborate with DevOps teams to secure automated workflows and deployments.
- Enable applications to securely retrieve credentials using API or sidecar containers.
- Security & Compliance:
- Maintain audit trails, logs, and reports for compliance and incident response.
- Ensure best practices for least privilege access and Zero Trust architecture.
- Support security assessments and penetration testing activities involving secret access.
Required Skills & Qualifications:
- Hands-on experience with CyberArk Conjur (Open Source or Enterprise).
- Proficiency in managing secrets lifecycle: generation, rotation, expiration, and revocation.
- Experience with Linux/Unix administration, shell scripting, and RESTful APIs.
- Familiarity with IAM concepts, LDAP, RBAC, TLS/SSL, and PKI.
- Experience working with DevOps tools like Docker, Kubernetes, Jenkins, Ansible, Terraform, etc.
- Understanding of network and application security principles.
- Strong problem-solving and documentation skills.
Preferred Qualifications:
- CyberArk or relevant security certifications (e.g., CyberArk Defender/Conjur Certified).
- Knowledge of other secrets management tools (e.g., HashiCorp Vault, AWS Secrets Manager).
- Experience in regulated environments (e.g., financial services, healthcare) with compliance standards like SOC 2, HIPAA, ISO 27001.
