Associate Cloud Security Engineer- AWS- Remote (Anywhere in the U.S.)
GuidePoint Security LLC
Preference will be given to candidates residing in the Eastern or Central time zones.
As a Non-Human Identity (NHI) Manager, you will lead the enterprise program that secures machine and workload identities across cloud, on-premises, and CI/CD environments. You will guide the full identity lifecycle and partner with Platform Engineering, Cloud, DevOps, Security Operations, and Application teams to reduce risk from hard-coded and unmanaged credentials.
•Own the enterprise non-human identity security strategy, roadmap, operating model, governance, and reporting.
•Establish identity and access controls for API credentials and emerging AI agent identities.
•Support SOX, HIPAA, ISO 27001, and NIST CSF compliance and audit requirements through non-human identity risk reporting.
•Establish and operate discovery and inventory processes for service accounts, secrets, certificates, keys, and workload identities across the enterprise.
•Deploy and operate secrets management and machine identity platforms, including HashiCorp Vault, CyberArk Conjur, Azure Key Vault, or Venafi.
•Manage PKI and govern certificate issuance, renewal, rotation, revocation, and decommissioning to prevent outages caused by expired certificates.
•Automate secret rotation and eliminate hard-coded or embedded credentials in code and pipelines.
•Secure managed identities, IAM roles, service principals, and other cloud workload identities using least-privilege access and short-lived credentials.
•Integrate non-human identity controls into CI/CD pipelines, DevOps workflows, cloud platforms, and infrastructure-as-code practices.
•Lead analysts and engineers by setting standards, priorities, performance expectations, and accountability for program delivery.
•Drive cross-functional adoption of service account onboarding, ownership, attestation, and decommissioning practices.
•Assess identity risk, analyze complex security issues, and translate findings into practical controls and remediation priorities.
•Communicate non-human identity risks, decisions, and program requirements to technical teams, business partners, and audit stakeholders.
•Apply Zero Trust and least-privilege principles across machine, workload, cloud, API, and AI agent identities.
•Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related discipline.
•Minimum 8 years of experience in identity, cloud, or cybersecurity, including a minimum 3 years of experience focused on machine or non-human identity security.
•Hands-on experience with HashiCorp Vault, CyberArk Conjur, Azure Key Vault, Venafi, or comparable secrets management and machine identity platforms.
•Experience with PKI, certificate lifecycle management, and automated credential rotation.
•Experience securing cloud workload identities and service principals in Azure, AWS, or GCP.
•Experience with CI/CD, DevOps, infrastructure-as-code security, people leadership, Zero Trust, and least-privilege controls.
•Master's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related discipline.
•CISSP, HashiCorp Vault, Venafi, or relevant cloud security certification.
United States of America Pay Ranges:
Originally posted on Himalayas
GuidePoint Security LLC
Stryker
HBK - Hottinger Brüel & Kjær
Stryker
Dexcom
Terra Security
Therabody
Collectly
Greystar
Carhartt
MRO Corp
Stryker
LawVu
Common Securitization Solutions
TheHiveCareers
Terra Security
Hexaware Technologies Limited
ShorePoint Inc
North Wind Group
Law School Admission Council
Cyclotron
Stryker
Stryker
Quest Software
Tabby
Starbucks
Stryker
Apollo
Nebius
Interrahealth
Preference will be given to candidates residing in the Eastern or Central time zones.
As a Non-Human Identity (NHI) Manager, you will lead the enterprise program that secures machine and workload identities across cloud, on-premises, and CI/CD environments. You will guide the full identity lifecycle and partner with Platform Engineering, Cloud, DevOps, Security Operations, and Application teams to reduce risk from hard-coded and unmanaged credentials.
•Own the enterprise non-human identity security strategy, roadmap, operating model, governance, and reporting.
•Establish identity and access controls for API credentials and emerging AI agent identities.
•Support SOX, HIPAA, ISO 27001, and NIST CSF compliance and audit requirements through non-human identity risk reporting.
•Establish and operate discovery and inventory processes for service accounts, secrets, certificates, keys, and workload identities across the enterprise.
•Deploy and operate secrets management and machine identity platforms, including HashiCorp Vault, CyberArk Conjur, Azure Key Vault, or Venafi.
•Manage PKI and govern certificate issuance, renewal, rotation, revocation, and decommissioning to prevent outages caused by expired certificates.
•Automate secret rotation and eliminate hard-coded or embedded credentials in code and pipelines.
•Secure managed identities, IAM roles, service principals, and other cloud workload identities using least-privilege access and short-lived credentials.
•Integrate non-human identity controls into CI/CD pipelines, DevOps workflows, cloud platforms, and infrastructure-as-code practices.
•Lead analysts and engineers by setting standards, priorities, performance expectations, and accountability for program delivery.
•Drive cross-functional adoption of service account onboarding, ownership, attestation, and decommissioning practices.
•Assess identity risk, analyze complex security issues, and translate findings into practical controls and remediation priorities.
•Communicate non-human identity risks, decisions, and program requirements to technical teams, business partners, and audit stakeholders.
•Apply Zero Trust and least-privilege principles across machine, workload, cloud, API, and AI agent identities.
•Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related discipline.
•Minimum 8 years of experience in identity, cloud, or cybersecurity, including a minimum 3 years of experience focused on machine or non-human identity security.
•Hands-on experience with HashiCorp Vault, CyberArk Conjur, Azure Key Vault, Venafi, or comparable secrets management and machine identity platforms.
•Experience with PKI, certificate lifecycle management, and automated credential rotation.
•Experience securing cloud workload identities and service principals in Azure, AWS, or GCP.
•Experience with CI/CD, DevOps, infrastructure-as-code security, people leadership, Zero Trust, and least-privilege controls.
•Master's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related discipline.
•CISSP, HashiCorp Vault, Venafi, or relevant cloud security certification.
United States of America Pay Ranges:
Originally posted on Himalayas