Cyber Security Engineer

Job Title: Engineer, IAM (DevSecOps)

NIQ is looking to expand our Identity and Access Management (IAM) Program. To support this effort, we are looking for an Engineer. In this role, the Engineer will put a distinct focus on Secrets Management technology and associated processes to align with the enhancement of DevSecOps capabilities. The areas for this position are research, analysis, design, deployment, integration, administration, and day to day operations of the Secrets Management solution. The Engineer will also support DevSecOps activities with knowledge in programming languages and CI/CD pipeline workflows. The candidate will be part of the on-call rotation and provide engineering support.

What you will do:

• Research, perform gap analysis, design, implement, and manage secrets management infrastructure.
• Collaborate with cross-functional teams to understand secrets management requirements.
• Develop and implement secure coding practices to mitigate risks associated with hardcoded secrets.
• Establish and enforce policies for key lifecycle management, rotation, and expiration.
• Monitor and analyze key usage, providing insights for continuous improvement.
• Collaborate with cybersecurity teams to ensure compliance with industry standards and regulations.
• Conduct regular audits and vulnerability assessments to identify secret management risks.
• Develop automation using programming languages like Python
• Handle CI/CD pipelines using tools like GitHub, GitHub Actions and others.
• Design and implement secure sharing mechanisms for controlled access to secrets.
• Provide technical expertise and support for incident response related to secrets management.
• Deploy and manage Vault instances in high availability, hybrid and multi cloud environments

Qualifications:

• Bachelor's degree in computer science, Information Technology, or related field.
• Minimum 4 years of proven experience in implementing and supporting secrets management solutions.
• Proficiency in using and configuring secrets management tools (e.g., HashiCorp Vault, CyberArk Conjur).
• Strong understanding of secure coding practices and the identification of hardcoded secrets.
• Knowledge of key management principles, including rotation, expiration, and lifecycle.
• Familiarity with cybersecurity best practices and industry standards
• Proficient in operating within multi-cloud, DevOps, and CI/CD environments.
• Implement and manage Infrastructure as Code (Terraform, CloudFormation, ARM, Bicep, etc.).
• Expertise in cloud platforms (AWS, Azure, GCP) and containerization technologies (Docker, Kubernetes)
• Strong communication skills, both verbal and written.
• Must be able to communicate technical details in a clear, concise, understandable manner
• Ability to work in a dynamic and fast-paced environment.
• Relevant certifications (e.g., AWS DevOps, Python, Terraform) is a plus.

Join our team to contribute to the security and integrity of our organization's secrets management infrastructure!