Sr. SRE Engineer (IAM focus)

Sr. SRE Engineer (IAM Focus)

Location: Plano, TX / Charlotte, NC / Pennington, NJ (3 days onsite, 2 days remote)

Duration: 12-month contract (extension possible up to 36 months)

Work Authorization: US Citizen, Green Card, TN, H4, OPT (card expiration must be after 06/12/2027)

Interview Mode: 1 WebEx interview and possible 1 final in-person interview

Responsibilities:

• Serve as the senior technical SME for CyberArk PAM, CyberArk Secrets Vault, and enterprise secrets management platforms.
• Apply Site Reliability Engineering (SRE) principles to identity platforms, focusing on availability, scalability, resilience, and performance.
• Lead vulnerability remediation efforts, including configuration hardening, patching, and architectural improvements.
• Identify and drive remediation or removal of non-standard identity technologies.
• Design and maintain high availability and disaster recovery architectures for PAM and vault services.
• Develop and maintain automation for provisioning, secrets rotation, access workflows, and operational tasks.
• Implement and enhance monitoring, logging, alerting, and observability for identity services.
• Lead or support incident response, root cause analysis (RCA), and post-incident improvements related to identity platforms.
• Partner with Identity Engineering, Cyber Security, Cloud, and Application teams to integrate reliability and security controls into solutions.
• Contribute to standards, runbooks, operational documentation, and architectural guidance.
• Support audits, risk assessments, and compliance initiatives related to privileged access and secrets management.

Required Skills:

• Extensive hands-on experience with CyberArk PAM (EPM, PSM, PSMSession, CPM, PVWA).
• Strong expertise in CyberArk Secrets Vault, HashiCorp Vault, and enterprise secrets management solutions.
• Proven experience as a Site Reliability Engineer (SRE) or Senior Production Operations Engineer.
• Deep understanding of Identity and Access Management (IAM), privileged access, and Tier 0 security concepts.
• Experience managing identity platforms across on-premises and public cloud environments (AWS, Azure, GCP).
• Strong background in Linux/Unix systems, networking, and security fundamentals.
• Expertise in automation and scripting using Python, PowerShell, or Bash.
• Experience with monitoring and observability tools, including logs, metrics, and alerting.
• Strong incident management, troubleshooting, and root cause analysis skills.
• Ability to influence engineering teams and drive reliability improvements without direct authority.
• Experience with cloud security practices.
• Strong Linux and Python expertise.

Preferred Skills:

• Experience with HashiCorp Vault and CyberArk.
• Knowledge of cloud-native secrets services such as AWS Secrets Manager, Azure Key Vault, and GCP Secret Manager.
• Infrastructure as Code experience using Terraform, ARM, or CloudFormation.
• Familiarity with Zero Trust and Identity Threat Detection & Response (ITDR) concepts.
• Experience supporting regulatory, audit, and compliance requirements related to IAM and PAM.
• Knowledge of Kubernetes secrets management and CI/CD pipeline integrations.
• Prior experience in large-scale enterprise or regulated environments.
• Strong documentation, communication, and stakeholder management skills.