Keeper Security Implementation Engineer

Conviso Inc is hiring Keeper Security Implementation Engineer role, this is a 100% REMOTE set-up position & comes with benefits, 401K & some accrued PTO. The Ideal Candidate will own the full platform lifecycle, implementation, daily operations, system administration, and proactive maintenance, ensuring Keeper remains secure, performant, cost-efficient, and compliant with federal requirements.

Title: Keeper Security Implementation Engineer

Remote job

Responsibilities:

Implementation & Deployment

\n
• Provision and configure the Keeper Enterprise platform (Vault, Secrets Manager, Connection Manager, and related modules) within client’s environment
\n
• Configure integration with Entra ID (SSO/SCIM) for automated user provisioning, deprovisioning, and directory sync
\n
• Validate all components for compatibility, performance, and compliance prior to production release
\n

Daily Operations & System Administration

\n
• Serve as the primary point of contact for platform health, availability, and incident response
\n
• Monitor performance, uptime, and reliability across the Vault, Admin Console, Secrets Manager, and connected gateways/bridges
\n
• Administer RBAC integrated with Entra ID, managing team- and individual-level permissions
\n
• Manage integrations with developer and IT toolchains (CI/CD, RPA, service accounts) via Keeper Secrets Manager (KSM)
\n
• Maintain usage and security reporting dashboards for OIT Leadership
\n
• Document proofs-of-concept and leading practices
\n

Security, Compliance & Access Governance

\n
• Enforce security policies (password complexity, MFA, sharing restrictions, IP allowlisting)
\n
• Update security configurations in response to policy changes, vulnerabilities, or audit findings
\n
• Support the Authority to Operate (ATO) process in collaboration with the CISO and SASSY AWS Team
\n
• Conduct compliance monitoring and audit log review
\n
• Administer and test break-glass/emergency access procedures
\n

Cost Management & Capacity Administration

\n
• Administer licensing allocations and ensure accurate cost attribution
\n
• Review utilization and adjust license tiers/entitlements as needed
\n
• Deliver monthly reporting on license consumption, adoption, and budget variance
\n

Maintenance & Continuous Improvement

\n
• Perform routine and emergency patching, upgrades, and configuration changes
\n
• Maintain as-built architecture documentation, configuration records, and runbooks
\n
• Identify optimizations to improve performance, cost, and user experience
\n
• Refine SOPs and escalation processes in collaboration with the CIO and OIT
\n

Training & Stakeholder Support

\n
• Develop onboarding guides, SOPs, and vault usage documentation
\n
• Act as subject matter expert for OIT leadership on Keeper capabilities and best practices
\n

Required Skills & Qualifications

\n
• Password & Secrets Management: Keeper Enterprise (Vault, Admin Console, Secrets Manager, Connection Manager); PAM concepts
\n
• Identity & Security: Entra ID/Azure AD, SSO/SCIM, RBAC, SAML/OIDC, NIST RMF, MFA administration
\n
• Cloud & Infrastructure: Cloud hosting environments (AWS preferred); networking and gateway/bridge deployment familiarity
\n
• DevOps & Toolchain: CI/CD integration, secrets injection for automated workflows, Git-based workflows
\n
• Analytics & Reporting: Dashboard administration; license/cost monitoring, spend governance
\n
• Documentation: Technical writing, runbook/SOP development, as-built documentation
\n
• Communication: Stakeholder engagement, executive reporting
\n

Key Interfaces

\n
• OIT / CIO — Platform governance, operational reporting, strategic alignment
\n
• CISO / Cybersecurity Team — Credential security policy, continuous authorization
\n
• SASSY Team — Coordination with engineers, architects, and functional workstreams
\n