Standard Job Description
The Privileged Access Management (PAM) team in Lockheed Martin's Enterprise IT organization is hiring a seasoned Information Assurance professional with experience in cyber software engineering as well as deep expertise in Privileged Access Management (PAM) and secrets management.
What You Will Be Doing:
In this Privileged Access Management & Secrets Management Sr Engineer role, you will design, implement, and operate automated credential solutions that safeguard privileged access across hybrid environments. You will influence the overall objectives and long-range goals of Secrets Management for the organization and participate in developing and rolling out new services, and championing available solutions for the DevOps community. Your key responsibilities will include:
• Designing, Deploying and Documenting Secure Credential Platforms
• Architecting, installing, and maintaining industry-leading PAM and secrets tools such as HashiCorp Vault and CyberArk Conjur
• Ensuring robust protection of privileged accounts across on-premise, cloud, and edge systems
• Integrating Secrets into DevOps Pipelines
• Assisting development teams to seamlessly embed secret retrieval, rotation, and lifecycle processes into CI/CD workflows
• Leading strategic Influence & Thought
• Shaping the organization’s long term Secrets Management roadmap
• Championing best practice solutions
• Serving as an evangelist for secure credential management within the DevOps community
Further Information About This Opportunity:
This role is fully remote. US Citizenship is required due to system access; the ability to obtain Secret level clearance also may be required if needed.
Basic Qualifications
- Proven track record implementing HashiCorp Vault, CyberArk Conjur, or comparable PAM/secret management platforms at scale
- Strong background in integration of secrets management into Jenkins, GitLab, similar CI/CD tools and the corresponding web services and workloads
- Experience supporting compliance ensuring secrets management complies with standards such as DFARS, CMMC, SOX, and ISO 27001
- Clear understanding of programmatic authentication methods ranging from static methods to token based, key based and specific platform workload methods
- Proficiency in scripting (Python, PowerShell, Bash), and infrastructureascode (Terraform, CloudFormation)
- Experience supporting cyber operations through secure system design and enhancing defensive visibility with identity and access management
- Excellent communication and stakeholder management abilities; capable of influencing cross functional teams and advocating security best practices
- Ability to translate complex security requirements into practical, automated solutions
- Passion for staying current with emerging threats, cryptographic standards, and evolving PAM technologies
- Collaborative mindset, fostering a security first culture within DevOps and engineering squads
- US Citizenship is required due to system access
Desired Skills
- Ansible experience
- Knowledge of managing security for AWS IAM resources
- SailPoint IIQ experience - Information Security experience
- Active Directory experience
- Active Secret Clearance
Pay Information
GeoZone Definition: GeoZones are geographic groupings created by Lockheed Martin to align compensation ranges with regional labor markets and cost-of-labor differences across the United States. Locations are assigned a Geo Zone based on the primary work location of the role.
- Full-time salary range (GEOZONE 1): $122600.00 - $227600.00
- Includes metropolitan areas such as Sunnyvale CA; Pal Alto, CA; New York City metropolitan area; Newark, New Jersey; etc.
- Full-time salary range (GEOZONE 2): :$110300.00 - $204900.00
- Includes metropolitan areas such as Denver, CO; King of Prussia, PA; Stratford, CT; Moorestown, NJ; etc.
- Full-time salary range (GEOZONE 3): :$98100.00 - $182100.00
- Includes metropolitan areas such as Dallas–Fort Worth, TX; Orlando, FL; Grand Prairie, TX; Marietta, GA; etc.
- Full-time salary range (GEOZONE 4): :$88300.00 - $163900.00
- Includes metropolitan areas such as Camden, AR; Lexington, KY; Ocala, FL; Lufkin, TX; etc.
At Lockheed Martin, we know mission success starts with taking care of our people. Our Total Rewards program is designed to attract top talent, support your well-being, and help you grow—both professionally and personally.
The salary range for this position is as listed on the requisition. Please note that the salary information listed is a general guideline only.
Lockheed Martin considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/ training, key skills as well as market(work location) and business considerations when extending an offer.
Benefits offered: Medical, Dental, Vision, Flexible work arrangements and schedules (e.g., 4x10), 401(k) match, Paid time off, Holidays, Parental Leave, EAP, Flexible Spending Accounts, Education Assistance, Life Insurance, Short-Term Disability, and Long-Term Disability.
- Annual short-term and/or long-term incentive compensation programs may be offered depending on the position. Payments under these annual programs are not guaranteed and can vary from year to year and are tied to a range of performance metrics.
- For (Washington state applicants only) Non-represented full-time employees: accrue at least 10 hours per month of Paid Time Off (PTO) to be used for incidental absences and other reasons; receive at least 90 hours for holidays. Represented full time employees accrue 6.67 hours of Vacation per month; accrue up to 52 hours of sick leave annually; receive at least 96 hours for holidays. PTO, Vacation, sick leave, and holiday hours are prorated based on start date during the calendar year.