> Markdown version of [/jobs/ext/4717402-staff-information-security-engineer](https://www.wearedevelopers.com/jobs/ext/4717402-staff-information-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Staff Information Security Engineer

- **Company:** UKG Inc.
- **Location:** Sunrise, FL, United States
- **Experience:** Expert
- **Salary:** $115,100 - $165,450
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, User Authentication, Cloud Computing Security, Cloud Engineering, Cyber Security, System Configuration, Continuous Integration, Software Debugging, DevOps, Disaster Recovery, Github, Python (Programming Language), Key Management, Public Key Infrastructure, Windows PowerShell, Prometheus, Software Deployment, Systems Integration, SSL Certificate Management, Scripting, Google Cloud, Cloud Platform System, System Availability, Delivery Pipeline, Grafana, Containerization, Kubernetes, Infrastructure Automation Frameworks, Hashicorp, Restful APIs, Terraform, Devsecops, Pagerduty
- **Published:** November 14, 2026
- **Apply:** https://dejobs.org/x/x/AF72A1AAA9A94C3B8E02B026995281BD/job/

## About the Role

* 8+ years of hands-on experience in DevOps, DevSecOps, security engineering, cloud engineering, platform engineering, infrastructure engineering, or a related technical field.
 * Experience administering, troubleshooting, and supporting enterprise HashiCorp Vault environments, including highly available production deployments.
 * Experience managing enterprise security infrastructure, including secrets management platforms, certificate management, PKI, or secure access infrastructure.
 * Strong hands-on experience developing Infrastructure as Code using Terraform and implementing automation through Python, PowerShell, or similar scripting languages.
 * Experience deploying, configuring, and supporting infrastructure in cloud environments such as GCP or AWS.
 * Experience supporting highly available enterprise platforms, including troubleshooting, disaster recovery, reliability, and operational monitoring.
 * Familiarity with HashiCorp Consul, cloud-based secrets management solutions, and secure authentication and authorization patterns.
 * Experience with REST APIs, system integrations, CI/CD workflows, and infrastructure automation.
 * Strong analytical, debugging, problem-solving, and cross-functional collaboration skills., * Experience with GCP Google Secret Manager, AWS Secrets Manager, or similar cloud-native secrets management platforms.
 * Experience migrating or modernizing enterprise secrets management infrastructure.
 * Advanced experience with HashiCorp Vault and Consul, including enterprise-scale clusters, high availability, and disaster recovery.
 * Experience administering enterprise PKI environments and automating certificate issuance and renewal using ACME or similar protocols.
 * Experience with machine identities, service accounts, Workload Identity Federation (WIF), and keyless authentication.
 * Experience with Kubernetes, containerized workloads, and cloud-native infrastructure.
 * Experience implementing observability, monitoring, and alerting using Grafana, Prometheus, PagerDuty, or similar technologies.
 * Experience designing reusable Terraform modules and automation frameworks to improve infrastructure reliability and operational efficiency.
 * Experience establishing technical standards, influencing architectural decisions, and mentoring other engineers.

## Description

As a Staff Information Security Engineer, you'll play a key role in designing, maintaining, and modernizing enterprise security infrastructure with a strong focus on DevOps/DevSecOps engineering, secrets management, certificate lifecycle management, and cloud security platforms.

You'll support highly available HashiCorp Vault and Consul environments while helping advance UKG's transition toward cloud-native secrets management solutions, including Google Secret Manager within GCP. This is a highly hands-on position requiring strong infrastructure troubleshooting, automation, scripting, and technical problem-solving skills.

You'll work closely with engineering teams to improve platform reliability, scalability, observability, and operational efficiency while contributing to security infrastructure modernization initiatives.

In this role, you will:

 * Administer, maintain, and troubleshoot enterprise HashiCorp Vault and Consul environments, including cluster management, high availability, disaster recovery, and operational reliability.
 * Support the modernization of enterprise secrets management infrastructure, including the transition from HashiCorp Vault to Google Cloud Secret Manager within GCP.
 * Design, implement, and maintain infrastructure automation using Terraform, Python, PowerShell, GitHub Actions, REST APIs, and cloud-native technologies, including reusable modules, deployment workflows, and automated response capabilities.
 * Manage and support cloud-based security infrastructure, particularly within GCP and AWS, including secrets management, access infrastructure, and service identities.
 * Design, administer, and automate enterprise certificate lifecycle management and PKI solutions, including issuance, renewal, rotation, revocation, and troubleshooting.
 * Troubleshoot complex infrastructure, authentication, authorization, secrets management, and certificate-related issues across enterprise and cloud environments.
 * Implement and maintain observability, monitoring, and alerting solutions to improve infrastructure reliability, operational visibility, and incident response.