Senior Cybersecurity Engineer - Secrets Management

FactSet is currently seeking a subject matter expert to implement an Enterprise-wide Secrets Management solution.  The ideal candidate will be able to work with different groups to design, implement and support the Secrets Management solutions (HashCorp Vault, AWS Secrets Manager) across the enterprise and work with security and compliance teams to instill best practices in this realm. 

Job Responsibilities: 

• Work with the Security Governance, Risk & Compliance team to translate compliance requirements into project plans and automation that can deliver a seamless Secrets Management solution for the firm. 

• Work with development teams to integrate Secrets Management solution into their applications. 

• Where policies do not exist, define access policies and procedures in consultation with the Governance, Risk & Compliance team. 

• Participate in design sessions for HashiCorp Vault in multiple datacenters and private cloud and provide knowledge of architecture and configurations. 

• Responsible for complex program design, testing, debugging and documentation. 

• Provide escalated administrative support for systems as needed 

• Assist in building and maintaining secure integrations with HashiCorp Vault for automated secrets retrieval between applications. 

• Maintain and monitor the health of the Secrets Manger solution and it’s components. 

• Partner with and ultimately manage the relationship with key technical vendors to deliver capabilities and services 

Job Requirements

• 5+ years of relevant Security Engineering, Systems Engineering or Software Engineering experience 

• 5+ years of experience administering a Secrets Management solution ( HashiCorp Vault, Conjur, AWS Secrets Manager or Azure Key Vault) 

• 3+ years of experience with scripting to help automate processes (example python, bash, terraform) 

• 2+ Years cloud services implementation in AWS 

• Experience in API development  

• Experience with Windows/*NIX platforms in large heterogeneous environment. 

• Excellent understanding of authentication, authorization, role-based access, least privilege and segregation of duties access control concepts. 

• Proven experience leading troubleshooting and solving issues related to identities, access, accounts, authentication, authorization, entitlements, and permissions. 

• Ability to perform duties with minimal supervision 

• Bachelor’s degree in Computer Science/Engineering or related field 

• Experience with PAM, IGA or PKI (Required)

• Relevant industry training and/or certification  (Required)

• Proven track record of successful technical project implementations and support of those applications. (Required)

• Thorough, detail-oriented and quality-driven with excellent communication and inter-personal skills (Required)