Senior Integration Engineer, PAM & Secrets at Keeper

This role is designed for a senior technical professional who enjoys the intersection of DevSecOps and customer success. The ideal candidate has 6+ years of exp

Work type: remote

Location: Remote, US

Type: Full-time

Summary

This role is designed for a senior technical professional who enjoys the intersection of DevSecOps and customer success. The ideal candidate has 6+ years of experience and deep expertise in Privileged Access Management (PAM) or Secrets Management. You should be highly proficient in Python or PowerShell and comfortable automating security workflows within modern CI/CD pipelines (GitHub Actions, GitLab, Jenkins) and cloud environments like Kubernetes. This is a high-impact, 100% remote position within a rapidly growing cybersecurity firm. While fully remote, those near Chicago or El Dorado Hills can opt for a hybrid schedule. You’ll act as a strategic advisor, helping enterprise customers migrate away from legacy tools like CyberArk or BeyondTrust. The benefits package is comprehensive, featuring a generous PTO plan that scales with your seniority and employer-paid life insurance. **You might be a good fit if you...** * Have hands-on experience migrating enterprise customers from legacy PAM platforms to modern cloud solutions. * Are comfortable acting as both a technical architect and a consultant for executive stakeholders. * Can write clean, reusable scripts to automate secrets injection and credential rotation. * Enjoy building reference architectures and runbooks for tools like Terraform and Helm.

Job Description

Description

Keeper Security is hiring a Senior Customer Integration Engineer, Identity & Secrets to lead high-impact customer integrations and migrations for Keeper’s Privileged Access Management (PAM) and Secrets Manager solutions. This is a highly technical, customer-facing role where you will partner with enterprise security, platform, and DevOps teams to implement secure identity and secrets-management patterns across CI/CD pipelines, cloud environments, and Kubernetes. This is a 100% remote position, with an opportunity to work a hybrid schedule for candidates based in the Chicago, IL or El Dorado Hills, CA metro areas.

Keeper’s cybersecurity software is trusted by millions of people and thousands of organizations globally. Keeper is published in 23 languages and sold in over 150 countries. Join one of the fastest-growing cybersecurity companies and help customers deploy Keeper quickly, securely, and at scale.

About Keeper

Keeper Security is transforming cybersecurity for people and organizations around the world. Keeper’s affordable and easy-to-use solutions are built on a foundation of zero-trust and zero-knowledge security to protect every user on every device. Our award-winning, zero-trust, privileged access management platform deploys in minutes and seamlessly integrates with any tech stack and identity application to provide visibility, security, control, reporting and compliance across an entire enterprise. Trusted by millions of individuals and thousands of organizations, Keeper is an innovator of best-in-class password management, secrets management, privileged access, secure remote access and encrypted messaging. Learn more at KeeperSecurity.com.

About the Role

As a Senior Customer Integration Engineer, Identity & Secrets, you will own technical delivery for complex enterprise integrations and migrations—often replacing legacy PAM and secrets tooling with Keeper’s modern platform. You will lead discovery sessions, design secure implementation approaches, automate workflows using scripting and APIs, and guide customers through key deployment and migration milestones. You’ll also serve as a technical escalation point during critical engagements and partner closely with Sales Engineering, Customer Success, Product, and Support to remove blockers and improve repeatability. This role is built for a senior technologist who can operate credibly with engineers and executives, translate requirements into secure designs, and deliver reusable integration patterns that reduce time-to-value across the customer base.

Responsibilities

• Lead technical discovery and implementation planning for enterprise integrations and migrations involving Keeper PAM and Keeper Secrets Manager (KSM)

• Drive end-to-end migration engagements from legacy PAM and secrets solutions to Keeper, including environment assessment, migration planning, execution, validation, and cutover readiness

• Implement secure identity, credential, and secrets-management patterns for both human and non-human identities across customer environments (e.g., Active Directory, Entra ID/Okta, Kubernetes, CI/CD systems, cloud services)

• Conduct customer-facing workshops, architecture reviews, and technical planning sessions with stakeholders ranging from engineering teams to executive leadership

• Build and automate integration and migration workflows using scripting and APIs (e.g., Python, PowerShell, Bash) to improve reliability, speed, and repeatability

• Provide CI/CD and DevSecOps implementation guidance related to secrets injection, credential rotation, access controls, approvals, and policy-based guardrails

• Create and maintain reusable technical assets: reference integrations, templates, scripts, runbooks, troubleshooting guides, and best-practice playbooks for common ecosystems (Azure DevOps, GitHub Actions, GitLab CI, Jenkins, Terraform/Helm, Kubernetes)

• Serve as a technical advisor across pre-sales and post-sales activities for high-complexity opportunities, including evaluations and deployment planning (non-quota role)

• Resolve complex technical issues during implementations and migrations, acting as an escalation resource to ensure customer success

• Partner with Product, Engineering, and Support teams to communicate integration gaps, validate solutions, and improve product readiness based on field feedback

• Maintain clear documentation of technical decisions, deployment status, and outcomes to enable effective handoffs and organizational learning

• 6+ years of experience in a technical, customer-facing role such as Solutions Engineer, Migration Engineer, Professional Services, Solutions Architect, DevSecOps consultant, or Platform Engineering (customer-facing)

• Proven experience leading complex enterprise integrations or migrations end-to-end, including planning, execution, and stakeholder management

• Strong knowledge of identity and access concepts, including SSO/MFA, RBAC/ABAC, service accounts/service principals, and credential lifecycle management

• Hands-on experience with scripting and automation (Python and/or PowerShell strongly preferred) and comfort working with APIs to integrate systems and automate workflows

• Practical experience with cloud and modern infrastructure environments (AWS/Azure/GCP concepts), including Kubernetes and containerized deployments

• Ability to translate customer requirements into secure, scalable implementation plans and guide customers through technical tradeoffs

• Strong written and verbal communication skills, including the ability to explain complex technical concepts to both engineers and executive stakeholders

• Willingness to travel up to 10%

• Direct experience with PAM, secrets management, or privileged identity programs in enterprise environments

• Experience migrating from CyberArk, BeyondTrust, Delinea/Thycotic, or similar competing platforms

• Familiarity with CI/CD and GitOps patterns, including infrastructure-as-code and pipeline integration approaches (Terraform, Helm, GitHub Actions, GitLab CI, Azure DevOps, Jenkins)

• Experience implementing policy gates or automation controls in delivery workflows (approvals, policy checks, secure release patterns)

• Comfort supporting regulated or compliance-driven customer environments (SOC 2, ISO 27001, FedRAMP/NIST 800-53)

• Security or cloud certifications (optional; not required)

• Medical, Dental & Vision (Inclusive of domestic partnerships)

• Employer Paid Life Insurance & Employee/Spouse/Child Supplemental life

• Voluntary Short/Long Term Disability Insurance

• 401k (Roth/Traditional)

• A generous PTO plan that celebrates your commitment and seniority (including paid Bereavement/Jury Duty, etc)

View this job on nocollar jobs