Senior Secrets Governance Engineer PKI - Enterprise Data Protection amp Security Remote

Profile

Description

This is a Work from Home / Remote Optional Position

In this role, you will be defining and operationalizing secrets governance framework and data security metrics for Humana. You will have direct contribution to the success of enhancing Humana's security posture by driving better tools and processes governing the organization's IT secrets with innovative solutions and technologies.

We are searching for an experienced engineer who can define and operationalize secrets management technologies and processes across the organization to increase Humana's security posture and deepen EIP's oversight of its application secrets.

As an Engineer you will play a key role in Enterprise Data Protection & Security team providing technical oversight of architecture and design of secrets related security tools, assessments and maturity roadmap. You will work closely with all areas of Enterprise Information Protection (EIP), business units, and strategic partners, and vendors to ensure data security initiatives and operations are in line with policies, standards and applicable controls.

Responsibilities


Serve as the subject matter expert for governance of secrets management technologies such as Venafi & Hashicorp Vault.
Monitor and measure continuous adoption and use of the security certificate program.
Establish and manage on-boarding process for engineering teams for certificate issuance, renewal, and revocation processes across Humana's multi cloud and on prem enclaves.
Enable teams to pilot certificate automation capability and improve capability based on pilot feedback.
Drive development and maintenance of contextual PowerBI metrics to increase adoption of enterprise security standards governing certificates, keys and passwords.
Advise on security best practices & routinized processes in the areas of data security.
Contribute to data security focused assessments, design reviews and controls.
Contribute and drive education for certificate automation and overall secrets governance.
Identify & maintain policies and standards to drive compliance.
Influence adoption and prioritization of policies and standards.
Develop strong partnership cross functionally with EIP and engineering teams.


Required Qualifications


7 years of experience in architecture, design and implementation of secrets governance and related technologies.
Experience in modern cryptography and its common applications, such as PKI, TLS 1.2/1.3, RSA/ECC cypher suites, DH key establishment, EST, OCSP, etc.
Experience with PKI processes and governance; establishment of PKI processes and PKI governance
Experience working with Cloud (Azure, AWS, GCP other cloud platforms) and common application architectures (app/web servers, containerization, etc.)
Working knowledge and understanding of systems development life cycle (SDLC), security regulations and best practices such as PCI DSS, SOX, HIPAA, GDPR and the ISO 27000 family of standards.
Basic understanding of modern application delivery through automation and pipelines
Experience developing automation solutions in Python, Java or PowerShell
Familiarity with Power BI, Power Apps, Power Automate, and SharePoint
Agile delivery experience
Secure Coding experience


Preferred Qualifications


Bachelor's Degree in a Technical Field
CISSP, CISM or equivalent, Cloud Architecture / Cloud Security Certifications (AWS, Azure, GCP), Cloud Security Alliance (CCSP, CCSK)
Knowledge of the Mitre ATT&CK framework, NIST Cyber Security Framework, familiarity with common security controls in the enterprise (Firewall, Proxy, AV, SIEM, etc.
Experience with deploying and configuring Venafi and Hashicorp Vault and Terraform Enterprise in a highly available environment


Additional

Humana and its subsidiaries require vaccinated associates who work outside of their home to submit proof of vaccination, including COVID-19 boosters. Associates who remain unvaccinated must either undergo weekly negative COVID testing OR wear a mask at all times while in a Humana facility or while working in the field.

Work-At-Home Requirements


WAH requirements: Must have the ability to provide a high speed DSL or cable modem for a home office. Associates or contractors who live and work from home in the state of California will be provided payment for their internet expense.
A minimum standard speed for optimal performance of 25x10 (25mpbs download x 10mpbs upload) is required.
Satellite and Wireless Internet service is NOT allowed for this role.
A dedicated space lacking ongoing interruptions to protect member PHI / HIPAA information


#LI-WM1

#LI-Remote

#KPI

#SecretsGovernance

#Azure

#SecurityFramework

Scheduled Weekly Hours

40

Company info

Sign Up Now - MiamiCrossing.com