Enable dynamic/ephemeral secrets (Database, PKI, SSH, Cloud) and cryptographic services (Transit ... Required: 3+ years direct people leadership experience, including hiring, coaching, performance ...
Enable dynamic/ephemeral secrets (Database, PKI, SSH, Cloud) and cryptographic services (Transit ... Required: 3+ years direct people leadership experience, including hiring, coaching, performance ...
Senior Staff Product Manager - Platform Security
Durham, NC · On-site
$122K - $161K/yr
... suchaas PKI, certificate automation pipelines, CA/RA models, HSM/KMS integration, token/secret stores,mTLSauthentication, and access trust chains. * Direct experience leading large-scale ...
Senior Staff Product Manager - Platform Security
Durham, NC · On-site
$122K - $161K/yr
... suchaas PKI, certificate automation pipelines, CA/RA models, HSM/KMS integration, token/secret stores,mTLSauthentication, and access trust chains. * Direct experience leading large-scale ...
Reports To: Dir of Testing This role requires a full-time onsite presence in Durham, NC Target Base ... OCPP, ISO 15118, OCPI, PKI) * Preferred: Detailed understanding of the current public fast charging ...
Reports To: Dir of Testing This role requires a full-time onsite presence in Durham, NC Target Base ... OCPP, ISO 15118, OCPI, PKI) * Preferred: Detailed understanding of the current public fast charging ...
Reports To: Dir of Testing This role requires a full-time onsite presence in Durham, NC Target Base ... OCPP, ISO 15118, OCPI, PKI) * Preferred: Detailed understanding of the current public fast charging ...
Reports To: Dir of Testing This role requires a full-time onsite presence in Durham, NC Target Base ... OCPP, ISO 15118, OCPI, PKI) * Preferred: Detailed understanding of the current public fast charging ...
EV Charging Interoperability Technician
Raleigh, NC · On-site
$70/hr
Reports To: Dir of Testing This role requires a full-time onsite presence in Durham, NC Target Base ... OCPP, ISO 15118, OCPI, PKI) * Preferred: Detailed understanding of the current public fast charging ...
EV Charging Interoperability Technician
Raleigh, NC · On-site
$70/hr
Reports To: Dir of Testing This role requires a full-time onsite presence in Durham, NC Target Base ... OCPP, ISO 15118, OCPI, PKI) * Preferred: Detailed understanding of the current public fast charging ...
Sr. Systems Engineer
Raleigh, NC · On-site
$101K - $139K/yr
This organization has a direct impact on Advance Auto Parts' ability to introduce business ... Working experience with DNS, GroupPolicyand PKI. * Workingexperience andexpertisewith SCCMandInTune.
Sr. Systems Engineer
Raleigh, NC · On-site
$101K - $139K/yr
This organization has a direct impact on Advance Auto Parts' ability to introduce business ... Working experience with DNS, GroupPolicyand PKI. * Workingexperience andexpertisewith SCCMandInTune.
Sr. Systems Engineer
$101K - $139K/yr
This organization has a direct impact on Advance Auto Parts' ability to introduce business ... Working experience with DNS, GroupPolicyand PKI. * Workingexperience andexpertisewith SCCMandInTune.
Sr. Systems Engineer
$101K - $139K/yr
This organization has a direct impact on Advance Auto Parts' ability to introduce business ... Working experience with DNS, GroupPolicyand PKI. * Workingexperience andexpertisewith SCCMandInTune.
Sr. Systems Engineer
Raleigh, NC · On-site
$101K - $139K/yr
This organization has a direct impact on Advance Auto Parts' ability to introduce business ... Working experience with DNS, Group Policy and PKI. * Working experience and expertise with SCCM and ...
Sr. Systems Engineer
Raleigh, NC · On-site
$101K - $139K/yr
This organization has a direct impact on Advance Auto Parts' ability to introduce business ... Working experience with DNS, Group Policy and PKI. * Working experience and expertise with SCCM and ...
Director Pki information
How does a Director of PKI typically collaborate with other departments to ensure secure digital operations?
What are the key skills and qualifications needed to thrive as a Director of PKI, and why are they important?
What are Director PKI roles and responsibilities?
What is the difference between Director Pki vs Security Manager?
| Aspect | Director Pki | Security Manager |
|---|---|---|
| Credentials | Certifications in PKI, cybersecurity, or related fields | Certifications in security management, CISSP, CISM |
| Work Environment | Focus on PKI infrastructure, digital certificates, encryption | Broader security policies, risk management, team oversight |
| Industry Usage | Primarily in cybersecurity, IT, finance sectors | Across various industries including corporate, government |
The Director Pki specializes in managing Public Key Infrastructure and digital security systems, while the Security Manager oversees overall security policies and risk management. Both roles require security certifications and work within cybersecurity environments, but the Director Pki has a more technical focus on cryptography and certificate management, whereas the Security Manager handles broader security strategies.
- Systems Administrator
- Senior Systems Administrator
- Remote Vmware Systems Administrator
- Freelance Endpoint System Administrator
- Part Time Firewall Administrator
- Kubernetes Administrator
- Flex Schedule Ultipro System Administrator
- Active Directory Domain Administrator
- Executive Firewall Administrator
- Vmware Administrator Work From Home
Full-time
Re-posted 24 days ago
Fidelity Investments rating
8.7
Based on 271 frontline employees who took The Breakroom Quiz
15th of 150 rated financial services
Job description
Note: Fidelity will not provide immigration sponsorship for this position
The Role
The Director, Secrets Management & NonInteractive Access leads the enterprise program and platform for centralized secrets management and machine-to-machine (noninteractive) authentication. This technical leadership role owns the HashiCorp Vault platform to support diverse runtime environments. The role combines people leadership, product ownership, and deep handson technical expertise in HashiCorp Vault to deliver secure-by-default experiences for developers and platform teams while meeting regulatory and audit requirements.
The key responsibilities of the role are:
Lead and develop engineering and product teams delivering enterprise secrets management.
Own the enterprise platform, roadmap, delivery, resiliency.
Establish clear operating rhythms (standups, planning, retrospectives) and an inclusive, learning culture.
Enable autovaulting pipelines; build scalable onboarding and discovery patterns.
Ensure platform hardening, compliance, audit evidence, DR/IR readiness, and continuous risk reduction.
Design secure multitenant patterns (AppRole, Kubernetes auth, OIDC/JWT, AWS IAM, Azure MSI) with least privilege and shortlived credentials.
Enable dynamic/ephemeral secrets (Database, PKI, SSH, Cloud) and cryptographic services (Transit, Transform) with policy-as-code (Sentinel).
Harden the platform (CIS benchmarks where applicable), implement automated configuration and upgrades using Infrastructure as Code (Terraform).
Implement autovaulting pipelines and secret discovery to onboard applications at scale with paved paths and reference implementations.
Federate/cascade secrets from Vault to other vaults and cloud stores (Azure Key Vault, AWS Secrets Manager, and others) with lifecycle governance.
Provide selfservice APIs/CLIs/agents (Vault Agent/Injector) and SDKs; integrate with CI/CD, containers, and serverless platforms.
Partner with application, cloud, and data platform teams to remove hard-coded secrets and migrate legacy secret stores.
TheExpertiseand Skills You Bring
Bachelor's degree in Computer Science, Information Security, Engineering, or related field (Master's preferred).
Required: 3+ years direct people leadership experience, including hiring, coaching, performance management, and career development.
Required: Handson engineering experience implementing and operating HashiCorp Vault Enterprise in production.
Required: Expertise with Vault core components
Required: Experience with Terraform/IaC, policyascode, and operational automation.
Experience integrating secrets with Azure Key Vault, AWS Secrets Manager, or similar.
Strong communication, stakeholder influence, and product delivery skills.
Fidelity's Onsite Working Model
Fidelity is transitioning to a full-time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles.
Please be advised that Fidelity's business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.
What Fidelity Investments employees say
Pay
Benefits
Hours and flexibility
Workplace
Get the full story on Breakroom
About Fidelity
Sourced by ZipRecruiter