Key Responsibilities
· StrongDM Administration: Configure, administer, and support StrongDM access controls, gateways, resources, identities, roles, and access policies.
· Privileged Access Management (PAM): Implement least-privilege access, privileged session controls, access approvals, and audit trails in alignment with enterprise security requirements.
· AWS Security: Integrate StrongDM with AWS environments and support secure access to cloud resources, databases, and infrastructure.
· Kubernetes Access Management: Configure and troubleshoot secure access to Kubernetes clusters, namespaces, and related resources using StrongDM.
· Identity and Access Management: Integrate with enterprise identity providers and SSO solutions, support role-based access control (RBAC), and manage user provisioning and deprovisioning.
· Scripting and Automation: Develop scripts and automation workflows using Python, Bash, or PowerShell to streamline access provisioning, configuration management, operational tasks, and reporting.
· Infrastructure as Code: Support automated and repeatable configurations using Terraform and Git-based workflows.
· Security Monitoring and Auditing: Review access logs, investigate access issues, support audit requirements, and help maintain compliance with security policies.
· Troubleshooting and Operations: Diagnose and resolve StrongDM connectivity, authentication, authorization, gateway, and resource-access issues.
· Documentation and Collaboration: Maintain technical documentation, operational runbooks, and configuration standards while collaborating with IAM, Cloud Engineering, Security Operations, and application teams.
Required Skills and Qualifications
· Hands-on experience administering and supporting StrongDM in an enterprise environment.
· Strong understanding of Privileged Access Management (PAM) concepts, including privileged access controls, least privilege, session auditing, and access governance.
· Practical experience with AWS services and cloud security, including IAM roles, policies, and permissions.
· Experience with Kubernetes, including cluster access, namespaces, RBAC, and authentication and authorization mechanisms.
· Proficiency in scripting using Python, Bash, or PowerShell for automation and troubleshooting.
· Understanding of Identity and Access Management (IAM), SSO, federation, authentication, and authorization.
· Experience troubleshooting secure connectivity to cloud infrastructure, databases, and other enterprise resources.
· Familiarity with Linux environments, networking fundamentals, DNS, TLS/SSL, and TCP/IP.
· Experience with Git, CI/CD practices, and infrastructure automation.
· Strong analytical, troubleshooting, communication, and documentation skills.
Preferred Qualifications
· Experience integrating StrongDM with identity providers such as Okta, Microsoft Entra ID, or other enterprise SSO platforms.
· Familiarity with Terraform and Infrastructure as Code (IaC).
· Experience with other PAM solutions, such as CyberArk, BeyondTrust, or Delinea.
· Experience supporting production environments, incident management, change management, and on-call operations.
· Relevant AWS, Kubernetes, cloud security, or IAM certifications.
