Senior Integration Engineer, PAM & Secrets at Keepersecurity

Description Keeper Security is hiring a Senior Customer Integration Engineer, Identity & Secrets to lead high-impact customer integrations and migrations for Keeper’s Privileged Access Management (PAM) and Secrets Manager solutions. This is a highly technical, customer-facing role where you will partner with enterprise security, platform, and DevOps teams to implement secure identity and secrets-management patterns across CI/CD pipelines, cloud environments, and Kubernetes. This is a 100% remote position, with an opportunity to work a hybrid schedule for candidates based in the Chicago, IL or El Dorado Hills, CA metro areas. Keeper’s cybersecurity software is trusted by millions of people and thousands of organizations globally. Keeper is published in 23 languages and sold in over 150 countries. Join one of the fastest-growing cybersecurity companies and help customers deploy Keeper quickly, securely, and at scale. About Keeper Keeper Security is transforming cybersecurity for people and organizations around the world. Keeper’s affordable and easy-to-use solutions are built on a foundation of zero-trust and zero-knowledge security to protect every user on every device. Our award-winning, zero-trust, privileged access management platform deploys in minutes and seamlessly integrates with any tech stack and identity application to provide visibility, security, control, reporting and compliance across an entire enterprise. Trusted by millions of individuals and thousands of organizations, Keeper is an innovator of best-in-class password management, secrets management, privileged access, secure remote access and encrypted messaging. Learn more at KeeperSecurity.com. About the Role As a Senior Customer Integration Engineer, Identity & Secrets, you will own technical delivery for complex enterprise integrations and migrations—often replacing legacy PAM and secrets tooling with Keeper’s modern platform. You will lead discovery sessions, design secure implementation approaches, automate workflows using scripting and APIs, and guide customers through key deployment and migration milestones. You’ll also serve as a technical escalation point during critical engagements and partner closely with Sales Engineering, Customer Success, Product, and Support to remove blockers and improve repeatability. This role is built for a senior technologist who can operate credibly with engineers and executives, translate requirements into secure designs, and deliver reusable integration patterns that reduce time-to-value across the customer base. Responsibilities • Lead technical discovery and implementation planning for enterprise integrations and migrations involving Keeper PAM and Keeper Secrets Manager (KSM) • Drive end-to-end migration engagements from legacy PAM and secrets solutions to Keeper, including environment assessment, migration planning, execution, validation, and cutover readiness • Implement secure identity, credential, and secrets-management patterns for both human and non-human identities across customer environments (e.g., Active Directory, Entra ID/Okta, Kubernetes, CI/CD systems, cloud services) • Conduct customer-facing workshops, architecture reviews, and technical planning sessions with stakeholders ranging from engineering teams to executive leadership • Build and automate integration and migration workflows using scripting and APIs (e.g., Python, PowerShell, Bash) to improve reliability, speed, and repeatability • Provide CI/CD and DevSecOps implementation guidance related to secrets injection, credential rotation, access controls, approvals, and policy-based guardrails • Create and maintain reusable technical assets: reference integrations, templates, scripts, runbooks, troubleshooting guides, and best-practice playbooks for common ecosystems (Azure DevOps, GitHub Actions, GitLab CI, Jenkins, Terraform/Helm, Kubernetes) • Serve as a technical advisor across pre-sales and post-sales activities for high-complexity opportunities, including evaluations and deployment planning (non-quota role) • Resolve complex technical issues during implementations and migrations, acting as an escalation resource to ensure customer success • Partner with Product, Engineering, and Support teams to communicate integration gaps, validate solutions, and improve product readiness based on field feedback • Maintain clear documentation of technical decisions, deployment status, and outcomes to enable effective handoffs and organizational learning Requirements • 6+ years of experience in a technical, customer-facing role such as Solutions Engineer, Migration Engineer, Professional Services, Solutions Architect, DevSecOps consultant, or Platform Engineering (customer-facing) • Proven experience leading complex enterprise integrations or migrations end-to-end, including planning, execution, and stakeholder management • Strong knowledge of identity and access concepts, including SSO/MFA, RBAC/ABAC, service accounts/service principals, and credential lifecycle management • Hands-on experience with scripting and automation (Python and/or PowerShell strongly preferred) and comfort working with APIs to integrate systems and automate workflows • Practical experience with cloud and modern infrastructure environments (AWS/Azure/GCP concepts), including Kubernetes and containerized deployments • Ability to translate customer requirements into secure, scalable implementation plans and guide customers through technical tradeoffs • Strong written and verbal communication skills, including the ability to explain complex technical concepts to both engineers and executive stakeholders • Willingness to travel up to 10% Preferred Qualifications • Direct experience with PAM, secrets management, or privileged identity programs in enterprise environments • Experience migrating from CyberArk, BeyondTrust, Delinea/Thycotic, or similar competing platforms • Familiarity with CI/CD and GitOps patterns, including infrastructure-as-code and pipeline integration approaches (Terraform, Helm, GitHub Actions, GitLab CI, Azure DevOps, Jenkins) • Experience implementing policy gates or automation controls in delivery workflows (approvals, policy checks, secure release patterns) • Comfort supporting regulated or compliance-driven customer environments (SOC 2, ISO 27001, FedRAMP/NIST 800-53) • Security or cloud certifications (optional; not required) Benefits • Medical, Dental & Vision (Inclusive of domestic partnerships) • Employer Paid Life Insurance & Employee/Spouse/Child Supplemental life • Voluntary Short/Long Term Disability Insurance • 401k (Roth/Traditional) • A generous PTO plan that celebrates your commitment and seniority (including paid Bereavement/Jury Duty, etc) • Keeper Security, Inc. is an equal opportunity employer and participant in the U.S. Federal E-Verify program. We celebrate diversity and are committed to creating an inclusive environment for all employees. Classification: Exempt Keeper Candidate Privacy Notice This notice explains how Keeper Security processes your personal data during recruitment. Depending on the role and location, the Controller of personal data (the organization responsible for determining why and how personal data is processed) will be Keeper Security Inc. (US), Keeper Security EMEA Ltd. (Ireland), or Keeper Security APAC K.K (Japan). 1. Data We Collect Information You provide: • Contact details, CV/resume, cover letter • Employment history, qualifications, work eligibility • Application responses and uploaded documents Information We generate: • Interview notes, assessments, communications • Scheduling information Information From Others: • Recruiter/referral information who submit your profile • References (with your consent, before final offer) • Public professional profiles • Background verification (post offer) Voluntary Diversity and Equal Opportunity Information • We may ask you to voluntarily provide diversity information including race/ethnicity, gender, disability status and veteran status (US). Providing this information is optional and Keeper collects this data in order to comply with EEOC and similar requirements 2. How We Use Your Data • Assess your application and suitability • Manage interviews and recruitment workflow • Consider you for other/future roles (we may seek your consent to keep your information on our systems beyond the retention period specified) • Comply with employment law obligations 3. Legal Basis • Legitimate Interests (recruitment management, security and integrity of the hiring process) • Contracting steps (for progressed candidates) • Legal and regulatory compliance obligations; explicit consent where required 4. Who We Share Information With Internal: • HR, hiring managers, interviewers*, IT support for system administration *Note - diversity and equal opportunity data is not shared with hiring managers. Third Parties: Service providers who assist with: • Applicant tracking, recruitment systems and assessment providers • Background verification vendors (post offer) • Recruitment agencies (where applicable) • Tools to support communication, collaboration and to securely store your data Keeper ensures that all our third parties are contractually bound to protect your personal data with adequate safeguards in place. 5. International Transfers Your data may be accessed by Keeper entities globally as needed for the purposes of hiring and decision making. We protect any such data transfer between Keeper entities using appropriate safeguards under applicable data protection laws. 6. Security We implement appropriate technical and organizational measures to protect your data, consistent with our industry leading security standards. 7. Retention We keep your data for 24 months from your last application activity, then delete or anonymize it. Exceptions: • You opt into our talent database for further retention by providing consent (extended retention) • You're hired (transfers to employee records) 8. Your Rights You have the following rights and can contact us at the email below to exercise them: • Access, correct, or delete your data, subject to applicable law and retention requirements • Object to or restrict processing • Withdraw consent (where applicable) • Request data portability • Lodge a complaint with your data protection authority If you become an employee, your rights regarding your employee record are governed by our internal Employee Privacy Notice and certain data will be retained as required under relevant laws such as employment or tax law. When you request access to your personal data, some information may be redacted if it includes the personal data of other individuals or information that we must protect in order to preserve their privacy rights. 9. Automated Decisions Keeper does not make hiring decisions using solely automated processing. 10. Contact - Candidates can send privacy questions to: [Upgrade to PRO to see contact]