Privileged Access Management & Secrets Management Sr Engineer

Employer description

Standard Job Description
The Privileged Access Management (PAM) team in Lockheed Martin’s Enterprise IT organization is hiring a seasoned Information Assurance professional with experience in cyber software engineering as well as deep expertise in Privileged Access Management (PAM) and secrets management.

What You Will Be Doing:

In this Privileged Access Management & Secrets Management Sr Engineer role, you will design, implement, and operate automated credential solutions that safeguard privileged access across hybrid environments. You will influence the overall objectives and long-range goals of Secrets Management for the organization and participate in developing and rolling out new services, and championing available solutions for the DevOps community.  Your key responsibilities will include:

• Designing, Deploying and Documenting Secure Credential Platforms

• Architecting, installing, and maintaining industry-leading PAM and secrets tools such as HashiCorp Vault and CyberArk Conjur

• Ensuring robust protection of privileged accounts across on-premise, cloud, and edge systems
• Integrating Secrets into DevOps Pipelines
• Assisting development teams to seamlessly embed secret retrieval, rotation, and lifecycle processes into CI/CD workflows
• Leading strategic Influence & Thought
• Shaping the organization’s long term Secrets Management roadmap

• Championing best practice solutions

• Serving as an evangelist for secure credential management within the DevOps community

Further Information About This Opportunity:

This role is fully remote.  US Citizenship is required due to system access; the ability to obtain Secret level clearance also may be required if needed.

Basic Qualifications
Proven track record implementing HashiCorp Vault, CyberArk Conjur, or comparable PAM/secret management platforms at scaleStrong background in integration of secrets management into Jenkins, GitLab, similar CI/CD tools and the corresponding web services and workloadsExperience supporting compliance ensuring secrets management complies with standards such as DFARS, CMMC, SOX, and ISO 27001Clear understanding of programmatic authentication methods ranging from static methods to token based, key based and specific platform workload methodsProficiency in scripting (Python, PowerShell, Bash), and infrastructure-as-code (Terraform, CloudFormation)Experience supporting cyber operations through secure system design and enhancing defensive visibility with identity and access managementExcellent communication and stakeholder management abilities; capable of influencing cross functional teams and advocating security best practicesAbility to translate complex security requirements into practical, automated solutionsPassion for staying current with emerging threats, cryptographic standards, and evolving PAM technologiesCollaborative mindset, fostering a security first culture within DevOps and engineering squadsUS Citizenship is required due to system access

Desired Skills
Ansible experienceKnowledge of managing security for AWS IAM resourcesSailPoint IIQ experience - Information Security experience Active Directory experienceActive Secret ClearancePay Information

GeoZone Definition: GeoZones are geographic groupings created by Lockheed Martin to align compensation ranges with regional labor markets and cost-of-labor differences across the United States. Locations are assigned a Geo Zone based on the primary work location of the role. 

Full-time salary range (GEOZONE 1): $122600.00 - $227600.00 Includes metropolitan areas such as Sunnyvale CA; Pal Alto, CA; New York City metropolitan area; Newark, New Jersey; etc.Full-time salary range (GEOZONE 2): :$110300.00 - $204900.00 Includes metropolitan areas such as Denver, CO; King of Prussia, PA; Stratford, CT; Moorestown, NJ; etc.Full-time salary range (GEOZONE 3): :$98100.00 - $182100.00Includes metropolitan areas such as Dallas–Fort Worth, TX; Orlando, FL; Grand Prairie, TX; Marietta, GA; etc.Full-time salary range (GEOZONE 4): :$88300.00 - $163900.00Includes metropolitan areas such as Camden, AR; Lexington, KY; Ocala, FL; Lufkin, TX; etc. At  Lockheed Martin, we know mission success starts with taking care of our people. Our Total Rewards program is designed to attract top talent, support your well-being, and help you grow—both professionally and personally.

The salary range for this position is as listed on the requisition. Please note that the salary information listed is a general guideline only. 
Lockheed Martin considers factors such as (but not limited to) scope and responsibilities of the position, candidate’s work experience, education/ training, key skills as well as market(work location) and business considerations when extending an offer.  

Benefits offered: Medical, Dental, Vision, Flexible work arrangements and schedules (e.g., 4x10), 401(k) match, Paid time off, Holidays, Parental Leave, EAP, Flexible Spending Accounts, Education Assistance, Life Insurance, Short-Term Disability, and Long-Term Disability.

Annual short-term and/or long-term incentive compensation programs may be offered depending on the position. Payments under these annual programs are not guaranteed and can vary from year to year and are tied to a range of performance metrics.For (Washington state applicants only) Non-represented full-time employees: accrue at least 10 hours per month of Paid Time Off (PTO) to be used for incidental absences and other reasons; receive at least 90 hours for holidays. Represented full time employees accrue 6.67 hours of Vacation per month; accrue up to 52 hours of sick leave annually; receive at least 96 hours for holidays. PTO, Vacation, sick leave, and holiday hours are prorated based on start date during the calendar year.