Keeper Security Implementation Engineer

Conviso Inc is hiring Keeper Security Implementation Engineer role, this is a 100% REMOTE set-up position & comes with benefits, 401K & some accrued PTO. The Ideal Candidate will own the full platform lifecycle, implementation, daily operations, system administration, and proactive maintenance, ensuring Keeper remains secure, performant, cost-efficient, and compliant with federal requirements.

Title: Keeper Security Implementation Engineer
Remote job

Responsibilities:
Implementation & Deployment
Provision and configure the Keeper Enterprise platform (Vault, Secrets Manager, Connection Manager, and related modules) within client’s environment
Configure integration with Entra ID (SSO/SCIM) for automated user provisioning, deprovisioning, and directory sync
Validate all components for compatibility, performance, and compliance prior to production release

Daily Operations & System Administration
Serve as the primary point of contact for platform health, availability, and incident response
Monitor performance, uptime, and reliability across the Vault, Admin Console, Secrets Manager, and connected gateways/bridges
Administer RBAC integrated with Entra ID, managing team- and individual-level permissions
Manage integrations with developer and IT toolchains (CI/CD, RPA, service accounts) via Keeper Secrets Manager (KSM)
Maintain usage and security reporting dashboards for OIT Leadership
Document proofs-of-concept and leading practices

Security, Compliance & Access Governance
Enforce security policies (password complexity, MFA, sharing restrictions, IP allowlisting)
Update security configurations in response to policy changes, vulnerabilities, or audit findings
Support the Authority to Operate (ATO) process in collaboration with the CISO and SASSY AWS Team
Conduct compliance monitoring and audit log review
Administer and test break-glass/emergency access procedures

Cost Management & Capacity Administration
Administer licensing allocations and ensure accurate cost attribution
Review utilization and adjust license tiers/entitlements as needed
Deliver monthly reporting on license consumption, adoption, and budget variance

Maintenance & Continuous Improvement
Perform routine and emergency patching, upgrades, and configuration changes
Maintain as-built architecture documentation, configuration records, and runbooks
Identify optimizations to improve performance, cost, and user experience
Refine SOPs and escalation processes in collaboration with the CIO and OIT

Training & Stakeholder Support
Develop onboarding guides, SOPs, and vault usage documentation
Act as subject matter expert for OIT leadership on Keeper capabilities and best practices

Required Skills & Qualifications
Password & Secrets Management: Keeper Enterprise (Vault, Admin Console, Secrets Manager, Connection Manager); PAM concepts
Identity & Security: Entra ID/Azure AD, SSO/SCIM, RBAC, SAML/OIDC, NIST RMF, MFA administration
Cloud & Infrastructure: Cloud hosting environments (AWS preferred); networking and gateway/bridge deployment familiarity
DevOps & Toolchain: CI/CD integration, secrets injection for automated workflows, Git-based workflows
Analytics & Reporting: Dashboard administration; license/cost monitoring, spend governance
Documentation: Technical writing, runbook/SOP development, as-built documentation
Communication: Stakeholder engagement, executive reporting

Key Interfaces
OIT / CIO — Platform governance, operational reporting, strategic alignment
CISO / Cybersecurity Team — Credential security policy, continuous authorization
SASSY Team — Coordination with engineers, architects, and functional workstreams