{"id":3947777,"url":"https://alion.io/job/ukg-information-security-engineer-iii","title":"Information Security Engineer III","company":{"id":1758293,"name":"UKG","domain":"ukg.com","url":"https://alion.io/company/ukg-com","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Noida, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"HashiCorp Vault","optional":false},{"name":"IAM","optional":false},{"name":"PKI","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Vault","optional":false},{"name":"ISO 27001","optional":true},{"name":"Kubernetes","optional":true},{"name":"PCI DSS","optional":true},{"name":"SOC 2","optional":true},{"name":"Terraform","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-11-08T22:36:40Z","employer_posted_date":null,"last_verified_at":"2026-11-08T22:36:40Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"UKG is seeking an experienced Information Security Engineer III to join the Identity & Access Management (IAM) team. This role is responsible for designing, implementing, and supporting enterprise Public Key Infrastructure (PKI) and secrets management solutions that secure applications, infrastructure, and cloud workloads.\n\nThe ideal candidate will have hands-on experience with DigiCert PKI, Certificate Lifecycle Management (CLM), Google Secret Manager, and HashiCorp Vault, along with a strong understanding of cryptography, certificate management, and cloud security. You will work closely with Infrastructure, Cloud Engineering, DevOps, Security, and Application teams to automate certificate and secrets management while ensuring secure, scalable, and compliant operations.\n\nKey Responsibilities:\nDesign, implement, administer, and optimize enterprise PKI solutions using DigiCert.\nManage the complete certificate lifecycle, including certificate issuance, renewal, revocation, discovery, and automated deployment through Certificate Lifecycle Management (CLM).\nAdminister and support Google Secret Manager and HashiCorp Vault for secure storage, rotation, and access to secrets, certificates, and encryption keys.\nCollaborate with application, infrastructure, and DevOps teams to integrate PKI, certificate automation, and secrets management into enterprise platforms and CI/CD pipelines.\nImplement automation for certificate provisioning, renewal, and secret rotation using APIs, scripting, and infrastructure-as-code practices.\nMonitor PKI infrastructure and certificate health to ensure service availability and compliance.\nTroubleshoot certificate, TLS/SSL, secrets management, and authentication issues across cloud and on-premises environments.\nDevelop operational documentation, runbooks, and standard operating procedures.\nSupport security audits, regulatory compliance, and vulnerability remediation related to certificates, cryptographic assets, and secrets management.\nStay current with emerging technologies and security best practices related to PKI, cryptography, and cloud-native security.\n\nRequired Qualifications:\nBachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.\n5-9 years of experience in Information Security, IAM, Infrastructure Security, or Cloud Security Engineering.\nHands-on experience administering DigiCert PKI and Certificate Lifecycle Management (CLM) solutions.\nExperience managing enterprise TLS/SSL certificates, code-signing certificates, client certificates, and certificate automation.\nExperience with Google Secret Manager and HashiCorp Vault for enterprise secrets management.\nStrong understanding of PKI concepts, X.509 certificates, Certificate Authorities (CA), cryptographic key management, TLS/SSL, CSR generation, OCSP, and CRL.\nExperience integrating PKI and secrets management solutions with enterprise applications and cloud platforms.\nExperience with automation using REST APIs, PowerShell, Python, or Shell scripting.\nExperience with Google Cloud Platform (GCP); exposure to AWS or Azure is a plus.\nStrong analytical, troubleshooting, and problem-solving skills.\n\nPreferred Qualifications:\nExperience integrating PKI and secrets management into Kubernetes, containers, and CI/CD platforms.\nFamiliarity with Infrastructure as Code tools such as Terraform.\nKnowledge of identity and access management concepts, including authentication, authorization, and Zero Trust architecture.\nExperience supporting compliance frameworks such as SOC 2, ISO 27001, PCI DSS, or SOX.\nRelevant certifications such as DigiCert, HashiCorp Vault Associate, Google Cloud Security, Security+, or CISSP are desirable.\nSkills\nCLM, DigiCert, GCP, Google Cloud Platform, Google Secret Manager, PKI, Public Key Infrastructure, Secret Manager, Secrets Management, Vault","description_format":"text","description_chars":3844,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Services","Professional Services","Human Resources","HR & Payroll Software"],"lifecycle":[{"event":"open","at":"2026-11-08T22:36:40Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":26,"reasons":["seen:0","win:early"],"computed_at":"2026-11-09T00:42:01Z"},"pay":null,"html_url":"https://alion.io/job/ukg-information-security-engineer-iii","json_url":"https://alion.io/job/ukg-information-security-engineer-iii.json","meta":{"generated_at":"2026-11-09T00:42:01Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1517,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1758293},"rest":"https://alion.io/mcp/rest/get_company?id=1758293"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fukg-information-security-engineer-iii"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fukg-information-security-engineer-iii"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fukg-information-security-engineer-iii"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ukg-information-security-engineer-iii\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fukg-information-security-engineer-iii"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3947777}},{"tool":"search_jobs","arguments":{"company":"ukg.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3947777},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}