← Data Protection & Critical Systems

Data Protection & Critical Systems

Secrets Management Engineer

Not accepting applications
Remote Remote-friendly Tempo pieno Access tier: T4
Background screening required Professional credentials required Bonding or insurance required

About Sequester

Sequester is a privacy-first encrypted vault for personal photos and videos. We build software where security, reliability, and user trust are product features???not afterthoughts.

About this role

You will eliminate long-lived secrets from code and config???centralizing credentials in vaults with rotation, dynamic issuance, and leak detection across Sequester's repos and CI.

What you will do

  • Operate HashiCorp Vault, cloud secret managers, or equivalent for app and CI secrets
  • Migrate hardcoded secrets to dynamic credentials with documented rotation
  • Integrate secret scanning in GitHub/GitLab and block merges on high-confidence leaks
  • Define patterns for mobile apps that must never embed production secrets
  • Respond to secret exposure incidents with revocation and scope assessment playbooks

What we are looking for

  • Secrets management platform experience at scale
  • CI/CD integration skills and developer-friendly documentation
  • Incident response experience for credential leaks
  • Tier-4 screening and credential requirements

Location

Remote-friendly. We hire globally and collaborate async-first across time zones.

Not currently accepting applications

This role page remains available for reference, but we are not accepting new applications right now. Check back later or browse other openings. Sfoglia le posizioni