UC
Unknown company
NewBe an early applicant
Consultant Subject Matter Expert Secrets Management
Posted Updated
Consultant Subject Matter Expert Secrets Management Role Summary: We are looking for an experienced Architect / Subject Matter Expert in Secrets Management to lead a critical Proof of Concept (PoC) comparing IBM Vault and OpenBao. In this role, you will evaluate solutions against predefined enterprise requirements, guide architectural decisions, develop High-Level and Service Designs, and validate complex rotation and integration use cases within a security-governed infrastructure. Key Responsibilities & Scope: - Lead a Proof of Concept (PoC) to evaluate and choose between an IBM Vault and OpenBao solution based on a structured test plan. - Advise enterprise stakeholders based on predefined requirements and security standards. - Create and support the High-Level Design (HLD) and Service Design. - Write robust, objective comparative technical assessments capable of withstanding strict stakeholder and architectural review. - Validate, review, and test key enterprise secrets management use cases: - Integration with Azure KeyVault with automated secret rotation. - Integration with Oracle KeyVault with database credential rotation. - Deployment of the secrets management client on virtual machines in the private cloud. - Automated rotation of API keys. - System and service account password rotation. - Rotation of authentication secrets for the LDAP directory. - Management and automated rotation of SSH keys. - Static storage keys managed as secrets (e.g., MinIO S3 usage). - Optional: Sharing secrets for JWT tokens and OpenID Connect (Single Sign-On). - Secrets for containerized applications running on MCPaaS (Pulse). - Integration and interworking with Symantec security solutions. Required Skills & Experience: - Proven track record as an Architect / Senior Subject Matter Expert in Secrets Management and PKI architecture. - Solid understanding of container platform architecture. - In-depth knowledge of compliance frameworks, specifically...
