IAM Security Engineer

The Judge Group's direct client in the financial services industry is seeking an experienced "IAM Security Engineer". This is a Hybrid role in Culpeper, VA. Job Title: IAM Security EngineerJob location: Culpeper, VA/ Hybrid Job Description:Seeking a IAM Security Engineer with strong expertise in securing and managing enterprise environments. The ideal candidate will have hands-on experience with HashiCorp Vault, Terraform, RHEL, and Ansible, and will contribute to the deployment, hardening, and automation of security solutions. This role requires a proactive individual who can troubleshoot complex issues, integrate platforms, and develop automation workflows. Key Responsibilities • Develop, test and perform OS and software upgrades, prepare for and perform business continuity activities and address vulnerabilities • Interact with Vendor and Swift internal teams to ensure availability of, maintenance, enhancements to, and integrated with all the Swift ecosystems (MS-AD, monitoring, backup, SIEM, …) of SSMS /Vault infrastructure • Investigate and resolve issues that impacts or could potentially impact the availability of SSMS and its Vault infrastructure • Assist application team(s) with onboarding digital secrets to the Secret Management including reviewing environment for authentication method, secrets engine to onboard secrets, assist in developing compliance reporting, policy review/enforcement, end to end lifecycle management activities • Work with the vendors’ delivery teams, maintaining a detailed design, request the pre-requisites and deploy the selected solutions/features in a highly available, resilient and secure configuration. Ensure the solution is integrated with all the Swift ecosystems (MS-AD, monitoring, backup, SIEM, …) • Maintain a runbook for the Secret Management service infrastructure and work with the administrators to maintain and enhance the administrators guide • On-call on a rotational basis Required Skills (Must-Have) • HashiCorp Vault Enterprise administration (deployment in HA, troubleshooting, monitoring, hardening, integrations). • Terraform hands-on experience (module development). • Red Hat Linux experience (troubleshooting, monitoring, hardening). • Ansible experience (developing roles, playbooks, AWX or Ansible Tower). Certifications (Nice to Have): • HashiCorp Certified: Vault Associate • Hashicorp Vault Operations Progressional • Terraform Associate Certification