StrongDM Engineer

Summary

Location

Irvine, CA or SNO, TX

Duration

1 year contract

Min 12 years of experience.

We are seeking a skilled StrongDM Engineer with hands-on experience in Privileged Access Management (PAM), AWS, Kubernetes, and scripting automation. The engineer will be responsible for implementing, administering, and supporting StrongDM to provide secure, centralized, and auditable access to infrastructure, databases, cloud environments, and other critical resources. The ideal candidate will have a strong background in security engineering, cloud infrastructure, access control, and automation, with a focus on improving operational efficiency and enforcing security best practices.

Responsibilities

• StrongDM Administration: Configure, administer, and support StrongDM access controls, gateways, resources, identities, roles, and access policies.
• Privileged Access Management (PAM): Implement least-privilege access, privileged session controls, access approvals, and audit trails in alignment with enterprise security requirements.
• AWS Security: Integrate StrongDM with AWS environments and support secure access to cloud resources, databases, and infrastructure.
• Kubernetes Access Management: Configure and troubleshoot secure access to Kubernetes clusters, namespaces, and related resources using StrongDM.
• Identity and Access Management: Integrate with enterprise identity providers and SSO solutions, support role-based access control (RBAC), and manage user provisioning and deprovisioning.
• Scripting and Automation: Develop scripts and automation workflows using Python, Bash, or PowerShell to streamline access provisioning, configuration management, operational tasks, and reporting.
• Infrastructure as Code: Support automated and repeatable configurations using Terraform and Git-based workflows.
• Security Monitoring and Auditing: Review access logs, investigate access issues, support audit requirements, and help maintain compliance with security policies.
• Troubleshooting and Operations: Diagnose and resolve StrongDM connectivity, authentication, authorization, gateway, and resource-access issues.
• Documentation and Collaboration: Maintain technical documentation, operational runbooks, and configuration standards while collaborating with IAM, Cloud Engineering, Security Operations, and application teams.

Requirements

• Hands-on experience administering and supporting StrongDM in an enterprise environment.
• Strong understanding of Privileged Access Management (PAM) concepts, including privileged access controls, least privilege, session auditing, and access governance.
• Practical experience with AWS services and cloud security, including IAM roles, policies, and permissions.
• Experience with Kubernetes, including cluster access, namespaces, RBAC, and authentication and authorization mechanisms.
• Proficiency in scripting using Python, Bash, or PowerShell for automation and troubleshooting.
• Understanding of Identity and Access Management (IAM), SSO, federation, authentication, and authorization.
• Experience troubleshooting secure connectivity to cloud infrastructure, databases, and other enterprise resources.
• Familiarity with Linux environments, networking fundamentals, DNS, TLS/SSL, and TCP/IP.
• Experience with Git, CI/CD practices, and infrastructure automation.
• Strong analytical, troubleshooting, communication, and documentation skills.

Preferred Skills

• Experience integrating StrongDM with identity providers such as Okta, Microsoft Entra ID, or other enterprise SSO platforms.
• Familiarity with Terraform and Infrastructure as Code (IaC).
• Experience with other PAM solutions, such as CyberArk, BeyondTrust, or Delinea.
• Experience supporting production environments, incident management, change management, and on-call operations.
• Relevant AWS, Kubernetes, cloud security, or IAM certifications.

Benefits

Details about benefits are not provided in the draft. Please consult the company’s HR department for more information.