IAM Security Engineer

About the role

We are looking for an IAM Security Engineer to design, deploy and harden secret management solutions across our enterprise environment. The role combines hands‑on infrastructure work with automation and integration of security platforms such as HashiCorp Vault, Terraform, Red Hat Enterprise Linux and Ansible.

Key responsibilities

• Develop, test and apply OS and software upgrades, perform business continuity activities and remediate vulnerabilities.
• Collaborate with vendors and internal teams to ensure availability, maintenance and integration of the SSMS/Vault ecosystem (Active Directory, monitoring, backup, SIEM, etc.).
• Investigate and resolve incidents affecting the availability of the Vault infrastructure.
• Assist application teams in onboarding digital secrets, reviewing authentication methods, configuring secrets engines and producing compliance reports.
• Design and deploy highly‑available, resilient and secure solutions in partnership with vendor delivery teams.
• Create and maintain runbooks, customer guides and documentation for secret‑management services.
• Provide regular reporting on key metrics and ensure service level commitments are met.
• Participate in on‑call rotation to support production environments.

Required profile

• Strong analytical and problem‑solving abilities.
• Excellent written and verbal communication skills.
• Ability to work collaboratively with cross‑functional teams and external vendors.

Required skills

• HashiCorp Vault Enterprise administration (HA deployment, troubleshooting, monitoring, hardening, integrations).
• Terraform – module development and infrastructure as code.
• Red Hat Enterprise Linux – troubleshooting, monitoring and hardening.
• Ansible – role and playbook development, AWX/Ansible Tower.
• Go programming (preferred for Vault plugin development).
• Jenkins pipeline creation and automation.
• Splunk query creation, dashboards and alerting.
• ELK Stack integration, queries, alerts and dashboards.
• SELinux policy development and troubleshooting.