Professional, Machine Identity & Secrets Engineer

Zinnov is hiring for the role of Professional, Machine Identity & Secrets Engineer on behalf of our Global MNC MedTech client company a company where technology sits at the centre of everything: powering how the core business operates day to day and shaping the products and digital solutions that will define the future of patient care. This role is part of the companys establishment of their new India Global Capability Centre (GCC) in Bengaluru which will drive enterprise technology, digital transformation and innovation for its global operations and contributing to technology that ultimately helps millions of people around the world.

How you'll make an impact

• Design and operate secrets-management platforms such as HashiCorp Vault, CyberArk Conjur / Secrets Manager, Azure Key Vault, AWS Secrets Manager, GCP Secret Manager, or equivalent.
• Manage machine identities, service accounts, API credentials, tokens, keys, certificates, and non-human identities across applications, infrastructure, cloud, and CI/CD environments.
• Implement certificate and PKI lifecycle management using platforms such as Venafi TLS Protect, Microsoft AD CS, DigiCert, or equivalent, including discovery, issuance, renewal, revocation, and expiration monitoring.
• Support modern workload identity patterns such as managed identities, workload identity federation, SPIFFE/SPIRE, Kubernetes service accounts, mTLS, OAuth 2.0, JWT, and short-lived credentials.
• Integrate secrets and machine-identity controls into Kubernetes, Terraform, GitHub/Azure DevOps/Jenkins pipelines, application runtimes, and infrastructure automation.
• Automate secrets rotation, certificate renewal, privileged credential handling, access provisioning, and policy enforcement using APIs, Python, PowerShell, Terraform, or equivalent tools.
• Monitor stale or excessive machine identities, embedded credentials, certificate expiry, privileged secrets, and policy violations and drive remediation with owners.
• Troubleshoot complex authentication, certificate, token, secrets, and identity-integration issues and perform root-cause analysis.
• Develop machine-identity standards, operating procedures, architecture documentation, audit evidence, and control metrics aligned to enterprise cybersecurity requirements.

What you'll bring

Skills Required:

• 3+ years of Experience in IAM, PAM, cybersecurity engineering, infrastructure security, platform engineering, or related identity-security disciplines.
• Hands-on experience with at least one secrets-management or PAM platform such as HashiCorp Vault, CyberArk, Azure Key Vault, AWS Secrets Manager, or equivalent.
• Strong understanding of machine identities, service accounts, secrets, certificates/PKI, authentication, authorization, tokens, keys, and privileged-access controls.
• Experience with cloud identity/security, APIs, Kubernetes or container platforms, CI/CD, and infrastructure automation in modern enterprise environments.
• Working knowledge of OAuth 2.0, JWT, mTLS, certificates, managed/workload identities, and secure credential lifecycle practices.
• Experience automating security or identity workflows using Python, PowerShell, Terraform, REST APIs, or equivalent tooling.
• Strong troubleshooting, documentation, security-control, audit, and cross-functional collaboration skills.
• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related field; equivalent experience may be considered.

Preferred:

• Experience with Venafi, Microsoft AD CS, SPIFFE/SPIRE, workload identity federation, Kubernetes secrets operators, or certificate automation.