Privileged Access Management & Secrets Management Sr Engineer

Standard Job Description

The Privileged Access Management (PAM) team in Lockheed Martin's Enterprise IT organization is hiring a seasoned Information Assurance professional with experience in cyber software engineering as well as deep expertise in Privileged Access Management (PAM) and secrets management.

What You Will Be Doing:

In this Privileged Access Management & Secrets Management Sr Engineer role, you will design, implement, and operate automated credential solutions that safeguard privileged access across hybrid environments. You will influence the overall objectives and long-range goals of Secrets Management for the organization and participate in developing and rolling out new services, and championing available solutions for the DevOps community. Your key responsibilities will include:

• Designing, Deploying and Documenting Secure Credential Platforms
• Architecting, installing, and maintaining industry-leading PAM and secrets tools such as HashiCorp Vault and CyberArk Conjur
• Ensuring robust protection of privileged accounts across on-premise, cloud, and edge systems
• Integrating Secrets into DevOps Pipelines
• Assisting development teams to seamlessly embed secret retrieval, rotation, and lifecycle processes into CI/CD workflows
• Leading strategic Influence & Thought
• Shaping the organization's long term Secrets Management roadmap
• Championing best practice solutions
• Serving as an evangelist for secure credential management within the DevOps community

Further Information About This Opportunity:

This role is fully remote. US Citizenship is required due to system access; the ability to obtain Secret level clearance also may be required if needed.

Basic Qualifications

• Proven track record implementing HashiCorp Vault, CyberArk Conjur, or comparable PAM/secret management platforms at scale
• Strong background in integration of secrets management into Jenkins, GitLab, similar CI/CD tools and the corresponding web services and workloads
• Experience supporting compliance ensuring secrets management complies with standards such as DFARS, CMMC, SOX, and ISO 27001
• Clear understanding of programmatic authentication methods ranging from static methods to token based, key based and specific platform workload methods
• Proficiency in scripting (Python, PowerShell, Bash), and infrastructure-as-code (Terraform, CloudFormation)
• Experience supporting cyber operations through secure system design and enhancing defensive visibility with identity and access management
• Excellent communication and stakeholder management abilities; capable of influencing cross functional teams and advocating security best practices
• Ability to translate complex security requirements into practical, automated solutions
• Passion for staying current with emerging threats, cryptographic standards, and evolving PAM technologies
• Collaborative mindset, fostering a security first culture within DevOps and engineering squads
• US Citizenship is required due to system access

Desired Skills

• Ansible experience
• Knowledge of managing security for AWS IAM resources
• SailPoint IIQ experience - Information Security experience
• Active Directory experience
• Active Secret Clearance

Pay Information

GeoZone Definition: GeoZones are geographic groupings created by Lockheed Martin to align compensation ranges with regional labor markets and cost-of-labor differences across the United States. Locations are assigned a Geo Zone based on the primary work location of the role.

• Full-time salary range (GEOZONE 1): $122600.00 - $227600.00

• Includes metropolitan areas such as Sunnyvale CA; Pal Alto, CA; New York City metropolitan area; Newark, New Jersey; etc.

• Full-time salary range (GEOZONE 2): :$110300.00 - $204900.00

• Includes metropolitan areas such as Denver, CO; King of Prussia, PA; Stratford, CT; Moorestown, NJ; etc.

• Full-time salary range (GEOZONE 3): :$98100.00 - $182100.00

• Includes metropolitan areas such as Dallas-Fort Worth, TX; Orlando, FL; Grand Prairie, TX; Marietta, GA; etc.

• Full-time salary range (GEOZONE 4): :$88300.00 - $163900.00

• Includes metropolitan areas such as Camden, AR; Lexington, KY; Ocala, FL; Lufkin, TX; etc.

At Lockheed Martin, we know mission success starts with taking care of our people. Our Total Rewards program is designed to attract top talent, support your well-being, and help you grow-both professionally and personally.

The salary range for this position is as listed on the requisition. Please note that the salary information listed is a general guideline only.

Lockheed Martin considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/ training, key skills as well as market(work location) and business considerations when extending an offer.

Benefits offered: Medical, Dental, Vision, Flexible work arrangements and schedules (e.g., 4x10), 401(k) match, Paid time off, Holidays, Parental Leave, EAP, Flexible Spending Accounts, Education Assistance, Life Insurance, Short-Term Disability, and Long-Term Disability.

• Annual short-term and/or long-term incentive compensation programs may be offered depending on the position. Payments under these annual programs are not guaranteed and can vary from year to year and are tied to a range of performance metrics.
• For (Washington state applicants only) Non-represented full-time employees: accrue at least 10 hours per month of Paid Time Off (PTO) to be used for incidental absences and other reasons; receive at least 90 hours for holidays. Represented full time employees accrue 6.67 hours of Vacation per month; accrue up to 52 hours of sick leave annually; receive at least 96 hours for holidays. PTO, Vacation, sick leave, and holiday hours are prorated based on start date during the calendar year.