Privileged Access Management & Secrets Management Sr Engineer

Standard Job Description

The Privileged Access Management (PAM) team in Lockheed Martin'sEnterprise IT organization is hiring a seasoned Information Assurance professional with experience in cyber software engineering as well as deep expertise in Privileged Access Management (PAM) and secrets management.

What You Will Be Doing:

In this Privileged Access Management & Secrets Management Sr Engineer role, you will design, implement, and operate automated credential solutions that safeguard privileged access across hybrid environments. You will influence the overall objectives and long-range goals of Secrets Management for the organization and participate in developing and rolling out new services, and championing available solutions for the DevOps community. Your key responsibilities will include:

• Designing, Deploying and Documenting Secure Credential Platforms

•Architecting, installing, and maintaining industry-leading PAM and secrets tools such as HashiCorp Vault and CyberArk Conjur

• Ensuring robust protection of privileged accounts across on-premise, cloud, and edge systems
• Integrating Secrets into DevOps Pipelines
•Assisting development teams to seamlessly embed secret retrieval, rotation, and lifecycle processes into CI/CD workflows

• Leading strategic Influence & Thought

•Shaping the organization’s long term Secrets Management roadmap

• Championing best practice solutions

• Serving as an evangelist for secure credential management within the DevOps community

Further Information About This Opportunity:

This role is fully remote. US Citizenship is required due to system access; the ability to obtain Secret level clearance also may be required if needed.

Basic Qualifications

- Proven track record implementing HashiCorp Vault, CyberArk Conjur, or comparable PAM/secret management platforms at scale

- Strong background in integration of secrets management into Jenkins, GitLab, similar CI/CD tools and the corresponding web services and workloads

- Experience supporting compliance ensuring secrets management complies with standards such as DFARS, CMMC, SOX, and ISO 27001

- Clear understanding of programmatic authentication methods ranging from static methods to token based, key based and specific platform workload methods

- Proficiency in scripting (Python, PowerShell, Bash), and infrastructureascode (Terraform, CloudFormation)

- Experience supporting cyber operations through secure system design and enhancing defensive visibility with identity and access management

- Excellent communication and stakeholder management abilities; capable of influencing cross functional teams and advocating security best practices

- Ability to translate complex security requirements into practical, automated solutions

- Passion for staying current with emerging threats, cryptographic standards, and evolving PAM technologies

- Collaborative mindset, fostering a security first culture within DevOps and engineering squads

- US Citizenship is required due to system access

Desired Skills

- Ansible experience

- Knowledge of managing security for AWS IAM resources

- SailPoint IIQ experience - Information Security experience

- Active Directory experience

- Active Secret Clearance

Pay Information

GeoZone Definition: GeoZones are geographic groupings created by Lockheed Martin to align compensation ranges with regional labor markets and cost-of-labor differences across the United States. Locations are assigned a Geo Zone based on the primary work location of the role.

- Full-time salary range (GEOZONE 1): $122600.00 - $227600.00 - Includes metropolitan areas such as Sunnyvale CA; Pal Alto, CA; New York City metropolitan area; Newark, New Jersey; etc.

- Full-time salary range (GEOZONE 2): :$110300.00 - $204900.00 - Includes metropolitan areas such as Denver, CO; King of Prussia, PA; Stratford, CT; Moorestown, NJ; etc.

- Full-time salary range (GEOZONE 3): :$98100.00 - $182100.00 - Includes metropolitan areas such