Cloud Security Engineer/IAM

Experience Range: 8–12 years

Role Summary

Persistent Systems is seeking a Staff Engineer – Security DevOps / IAM Platform Engineering to support IAM platform operations, certificate lifecycle management, and secure automation pipelines.

Key Responsibilities

• Design, maintain, and distribute CA trust bundles in formats such as PEM, JKS, RPM, and APK.
• Publish and version cryptographic artifacts in Artifactory, supporting multiple downstream consumers.
• Engineer and support certificate lifecycle and distribution pipelines with strong integrity and availability controls.
• Configure and optimize AWS Certificate Manager (ACM) integrations in partnership with Cloud Engineering teams.
• Implement and support CyberArk for secrets and certificate management.
• Build observability capabilities including health checks, SLIs/SLOs, and dashboards for certificate services.
• Automate security operations using Git, Bash, Python, and CI/CD pipelines.
• Support incident response, root-cause analysis, and continuous platform hardening.

Required Qualifications

• 8–12 years of experience in Security Engineering or DevSecOps roles.
• Strong expertise in PKI, certificate management, and trust models.
• Hands-on experience with AWS IAM, ACM, and CyberArk.
• Proficiency in Git-based workflows, scripting, and CI/CD automation.
• Experience supporting mission-critical security platforms in production environments.

Preferred Qualifications

• Experience with large-scale enterprise PKI environments.
• Knowledge of secure software supply chain practices.
• Financial services or highly regulated industry experience.