Quick overview
Job description
Position Overview
We are seeking a skilled StrongDM Engineer with hands-on experience in Privileged Access Management (PAM), AWS, Kubernetes, and scripting automation. The engineer will be responsible for implementing, administering, and supporting StrongDM to provide secure, centralized, and auditable access to infrastructure, databases, cloud environments, and other critical resources.
The ideal candidate will have a strong background in security engineering, cloud infrastructure, access control, and automation, with a focus on improving operational efficiency and enforcing security best practices.
Key Responsibilities
· StrongDM Administration: Configure, administer, and support StrongDM access controls, gateways, resources, identities, roles, and access policies.
· Privileged Access Management (PAM): Implement least-privilege access, privileged session controls, access approvals, and audit trails in alignment with enterprise security requirements.
· AWS Security: Integrate StrongDM with AWS environments and support secure access to cloud resources, databases, and infrastructure.
· Kubernetes Access Management: Configure and troubleshoot secure access to Kubernetes clusters, namespaces, and related resources using StrongDM.
· Identity and Access Management: Integrate with enterprise identity providers and SSO solutions, support role-based access control (RBAC), and manage user provisioning and deprovisioning.
· Scripting and Automation: Develop scripts and automation workflows using Python, Bash, or PowerShell to streamline access provisioning, configuration management, operational tasks, and reporting.
· Infrastructure as Code: Support automated and repeatable configurations using Terraform and Git-based workflows.
· Security Monitoring and Auditing: Review access logs, investigate access issues, support audit requirements, and help maintain compliance with security policies.
· Troubleshooting and Operations: Diagnose and resolve StrongDM connectivity, authentication, authorization, gateway, and resource-access issues.
· Documentation and Collaboration: Maintain technical documentation, operational runbooks, and configuration standards while collaborating with IAM, Cloud Engineering, Security Operations, and application teams.
Required Skills and Qualifications
· Hands-on experience administering and supporting StrongDM in an enterprise environment.
· Strong understanding of Privileged Access Management (PAM) concepts, including privileged access controls, least privilege, session auditing, and access governance.
· Practical experience with AWS services and cloud security, including IAM roles, policies, and permissions.
· Experience with Kubernetes, including cluster access, namespaces, RBAC, and authentication and authorization mechanisms.
· Proficiency in scripting using Python, Bash, or PowerShell for automation and troubleshooting.
· Understanding of Identity and Access Management (IAM), SSO, federation, authentication, and authorization.
· Experience troubleshooting secure connectivity to cloud infrastructure, databases, and other enterprise resources.
· Familiarity with Linux environments, networking fundamentals, DNS, TLS/SSL, and TCP/IP.
· Experience with Git, CI/CD practices, and infrastructure automation.
· Strong analytical, troubleshooting, communication, and documentation skills.
Preferred Qualifications
· Experience integrating StrongDM with identity providers such as Okta, Microsoft Entra ID, or other enterprise SSO platforms.
· Familiarity with Terraform and Infrastructure as Code (IaC).
· Experience with other PAM solutions, such as CyberArk, BeyondTrust, or Delinea.
· Experience supporting production environments, incident management, change management, and on-call operations.
· Relevant AWS, Kubernetes, cloud security, or IAM certifications.
Similar jobs
- CR
Senior DevSecOps EngineerRecently posted
Credence · McLean, Virginia · Hybrid 🇺🇸
Engineering$150k - $180k/yr - CR
Test and Evaluation Engineer IIIRecently posted
Credence · Aberdeen Proving Ground, Maryland · Hybrid 🇺🇸
JiraEngineering$120k - $160k/yr - PI

Chief Engineer (Precast)Recently posted
Peckham Industries · Shaftsbury, Vermont · Hybrid 🇺🇸
AutoCADRevitSolidWorks+1Engineering$120k - $165k/yr - CR
Senior DevSecOps Engineer, LeadRecently posted
Credence · Virginia · Hybrid 🇺🇸
Engineering$170k - $200k/yr - PI

Junior DevSec Ops EngineerRecently posted
Peckham Industries · Brewster, New York · Hybrid 🇺🇸
Microsoft OfficeEngineeringSalary not listed - AM

System Development Engineer II, Lambda/Serverless with Security ClearanceRecently posted
Amazon · Seattle, WA · Hybrid 🇺🇸
ScrumIoTAgileEngineering$129.2k - $174.8k/yr - BO
Structures Test & Evaluation Instrumentation Engineer (Experienc with Security ClearanceRecently posted
Boeing · Berkeley, MO · Hybrid 🇺🇸
Mechanical DesignEngineering$103.7k - $140.3k/yr - VI

Senior Engineer - Reload/Core DesignRecently posted
Vistra Corp · Glen Rose, TX · Hybrid 🇺🇸
Project ManagementEngineeringSalary not listed - DE

CI/CD Engineer (Journeyman)Recently posted
Decisionpoint Corporation · Chicago, IL · Hybrid 🇺🇸
AgileEngineeringSalary not listed - BO
Senior Industrial Engineer - Millennium Space Systems with Security ClearanceRecently posted
Boeing · El Segundo, CA · Hybrid 🇺🇸
AgileProject ManagementData AnalysisEngineering$135.2k - $198.8k/yr - BO
Experienced Design and Analysis Engineer ***Signing Bonus Potent with Security ClearanceRecently posted
Boeing · Berkeley, MO · On-site 🇺🇸
Engineering$112.2k - $151.8k/yr - BO
Senior Configuration Management Engineer with Security ClearanceRecently posted
Boeing · Berkeley, MO · On-site 🇺🇸
Engineering$126.7k - $171.3k/yr
