Keeper Security Implementation Engineer

Conviso Inc is hiring Keeper Security Implementation Engineer role, this is a 100% REMOTE set-up position & comes with benefits, 401K & some accrued PTO. The Ideal Candidate will own the full platform lifecycle, implementation, daily operations, system administration, and proactive maintenance, ensuring Keeper remains secure, performant, cost-efficient, and compliant with federal requirements.

Title: Keeper Security Implementation Engineer

Remote job

Responsibilities:

Implementation & Deployment

• Provision and configure the Keeper Enterprise platform (Vault, Secrets Manager, Connection Manager, and related modules) within client’s environment
• Configure integration with Entra ID (SSO/SCIM) for automated user provisioning, deprovisioning, and directory sync
• Validate all components for compatibility, performance, and compliance prior to production release

Daily Operations & System Administration

• Serve as the primary point of contact for platform health, availability, and incident response
• Monitor performance, uptime, and reliability across the Vault, Admin Console, Secrets Manager, and connected gateways/bridges
• Administer RBAC integrated with Entra ID, managing team- and individual-level permissions
• Manage integrations with developer and IT toolchains (CI/CD, RPA, service accounts) via Keeper Secrets Manager (KSM)
• Maintain usage and security reporting dashboards for OIT Leadership
• Document proofs-of-concept and leading practices

Security, Compliance & Access Governance

• Enforce security policies (password complexity, MFA, sharing restrictions, IP allowlisting)
• Update security configurations in response to policy changes, vulnerabilities, or audit findings
• Support the Authority to Operate (ATO) process in collaboration with the CISO and SASSY AWS Team
• Conduct compliance monitoring and audit log review
• Administer and test break-glass/emergency access procedures

Cost Management & Capacity Administration

• Administer licensing allocations and ensure accurate cost attribution
• Review utilization and adjust license tiers/entitlements as needed
• Deliver monthly reporting on license consumption, adoption, and budget variance

Maintenance & Continuous Improvement

• Perform routine and emergency patching, upgrades, and configuration changes
• Maintain as-built architecture documentation, configuration records, and runbooks
• Identify optimizations to improve performance, cost, and user experience
• Refine SOPs and escalation processes in collaboration with the CIO and OIT

Training & Stakeholder Support

• Develop onboarding guides, SOPs, and vault usage documentation
• Act as subject matter expert for OIT leadership on Keeper capabilities and best practices

Required Skills & Qualifications

• Password & Secrets Management: Keeper Enterprise (Vault, Admin Console, Secrets Manager, Connection Manager); PAM concepts
• Identity & Security: Entra ID/Azure AD, SSO/SCIM, RBAC, SAML/OIDC, NIST RMF, MFA administration
• Cloud & Infrastructure: Cloud hosting environments (AWS preferred); networking and gateway/bridge deployment familiarity
• DevOps & Toolchain: CI/CD integration, secrets injection for automated workflows, Git-based workflows
• Analytics & Reporting: Dashboard administration; license/cost monitoring, spend governance
• Documentation: Technical writing, runbook/SOP development, as-built documentation
• Communication: Stakeholder engagement, executive reporting

Key Interfaces

• OIT / CIO — Platform governance, operational reporting, strategic alignment
• CISO / Cybersecurity Team — Credential security policy, continuous authorization
• SASSY Team — Coordination with engineers, architects, and functional workstreams