Senior IAM Engineer - Akeyless

CVS Health

3d

About The Position

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time. Position Summary We are looking for an experienced and proactive hands-on Manager to work with the Secrets Manager Engineers in the Security Product Services team. The main responsibility is to oversee the design, deploy, and support enterprise-grade secrets management platforms, such as Akeyless and other key related activities, in multi-cloud environments. The ideal candidate will possess an expert-level understanding of best practices in secrets management, automation, and cloud-native security practices. Strong soft skills are essential to successfully run product integration efforts through completion within the CVS Health environment. The candidate will oversee the subject matter experts (SMEs) for secrets management platforms such as Akeyless and HashiCorp Vault. As the Tower lead (Manager), they will lead the integration of secrets management solutions with CI/CD pipelines, Kubernetes (AKS, GKE), and cloud platforms (Azure, AWS, GCP). They will automate the onboarding and rotation of secrets for applications and machine identities, ensuring a smooth and secure implementation. Collaboration with product managers, architects, and application teams is crucial to drive adoption and maintain secure implementation. The candidate will work with the team to maintain scripts and automation tools for secrets lifecycle management. Additionally, the candidate will support the migration of non-person accounts from PAM tools to secrets management platforms, monitor and remediate risks associated with unmanaged credentials and privileged access, and contribute to the development of onboarding guides, SDK integrations, and operational runbooks.

Requirements

• 5+ Strong project management experience and Agile methodologies.
• 5+ years of experience in security engineering deployments and Implementation of Products.
• 3+ years of hands-on experience of Enterprise deployments of Security products into production environments.
• 3+ years of experience with scripting in a common scripting language.
• 3+ years of experience in integrating products into Jenkins, GitHub Actions, or similar CI/CD tools.

Nice To Haves

• Experience with Kubernetes, container orchestration, and service mesh integrations.
• Deep understanding of cloud-native architectures and secure DevOps practices.
• Familiarity with API-based secret access, SDKs, and CLI tools.
• Experience working in large-scale enterprise environments.
• Exposure to hybrid secrets management strategies involving multiple vaulting solutions (e.g., Azure Key Vault, AWS Secrets Manager).
• Knowledge of Just-in-Time access, certificate-based authentication (e.g., Venafi), and Zero Knowledge encryption models.
• Familiarity with compliance frameworks and audit requirements for secrets management.

Responsibilities

• Oversee the design, deploy, and support enterprise-grade secrets management platforms, such as Akeyless and other key related activities, in multi-cloud environments.
• Oversee the subject matter experts (SMEs) for secrets management platforms such as Akeyless and HashiCorp Vault.
• Lead the integration of secrets management solutions with CI/CD pipelines, Kubernetes (AKS, GKE), and cloud platforms (Azure, AWS, GCP).
• Automate the onboarding and rotation of secrets for applications and machine identities, ensuring a smooth and secure implementation.
• Collaborate with product managers, architects, and application teams to drive adoption and maintain secure implementation.
• Work with the team to maintain scripts and automation tools for secrets lifecycle management.
• Support the migration of non-person accounts from PAM tools to secrets management platforms.
• Monitor and remediate risks associated with unmanaged credentials and privileged access.
• Contribute to the development of onboarding guides, SDK integrations, and operational runbooks.

Benefits

• Affordable medical plan options, a 401(k) plan (including matching company contributions), and an employee stock purchase plan.
• No-cost programs for all colleagues including wellness screenings, tobacco cessation and weight management programs, confidential counseling and financial coaching.
• Benefit solutions that address the different needs and preferences of our colleagues including paid time off, flexible work schedules, family leave, dependent care resources, colleague assistance programs, tuition assistance, retiree medical access and many other benefits depending on eligibility.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level