Security Engineer

Security Engineer

Location: Chicago, IL | Hybrid
Type: Full-Time

Work Authorization: Must be authorized to work in the U.S. without sponsorship.

About the Role

We are seeking an Associate Principal, Security Engineering professional with strong experience in HashiCorp Vault / Privileged Access Management (PAM) to support and enhance critical security infrastructure. This role will focus on secrets management, authentication, security automation, and cloud security while partnering with engineering and security teams.

Key Responsibilities

• Provide operational and engineering support for HashiCorp Vault, CyberArk, PKI/ADCS, and privileged access platforms.
• Manage secrets lifecycle, troubleshooting, upgrades, patching, break-fix, and platform enhancements.
• Design and maintain secure PAM and secrets-management architecture across on-prem and cloud environments.
• Automate security processes using Terraform, Ansible, Jenkins, Bash, Python, PowerShell, or Go.
• Integrate authentication and authorization technologies including AWS IAM, Active Directory, OAuth/OIDC, Kubernetes, LDAPS, and Kerberos.
• Apply Security-as-Code principles and support CI/CD security automation.
• Explore AI-assisted security engineering and automation to improve detection, troubleshooting, and remediation.

Required Qualifications

• Strong experience with HashiCorp Vault and/or CyberArk in an engineering or operational environment.
• Experience with Privileged Access Management, secrets management, or access controls.
• Strong scripting/automation experience with Python, Bash, PowerShell, Go, Terraform, or Ansible.
• Knowledge of cloud security, CI/CD, authentication, authorization, and security architecture.
• Experience with AWS IAM, Kubernetes, Active Directory, PKI/ADCS, or HSMs is highly valuable.
• Exposure to AI coding tools such as OpenAI Codex, Claude Code, or Gemini CLI.