Senior Application Security Engineer

About the role

We are seeking a Senior Application Security Engineer to lead the integration of security tooling and policy automation for our Unified Automation Platform. The role is fully remote, allowing you to work from anywhere in Armenia while collaborating with a governance‑heavy team.

Key responsibilities

• Implement and operate certificate‑management integration with Venafi, including issuance, distribution, renewal, and rotation across F5, Azure Key Vault, and VM/OS stores.
• Build and maintain secrets‑management integration using OpenBao and Azure Key Vault, covering configuration‑as‑code, authentication methods, policies, and dynamic secret engines.
• Design and implement Privileged Access Management “break‑the‑glass” workflows with time‑boxed grants, approval automation, session recording, and audit logging.
• Create SIEM and WAF alert‑integration pipelines, correlate entities, and develop a Vulnerability Dashboard aggregating SAST, DAST, SCA, IAST, and ASPM findings.
• Develop Policy as Code checks with OPA/Conftest and Azure Policy, integrate them into CI gates, and automate exemption workflows.
• Support Auth/RBAC configuration (Entra ID, Active Directory, GPOs, M365 groups) and translate firewall/WAF requirements (PaloAlto, F5, Cloudflare) into monitoring solutions.
• Assist SOC and IAM teams during security reviews, providing evidence and configuration details.

Required profile

• 3+ years of hands‑on experience with security‑tool integrations such as certificate lifecycle, secrets management, and PAM workflows.
• Practical experience building SIEM/SOAR alert pipelines and vulnerability‑management tooling.
• Proven ability to implement Policy as Code and enforce CI/CD gates.
• Strong knowledge of enterprise identity and access management (Entra ID, AD, RBAC).
• Familiarity with firewall/WAF concepts and alert correlation.
• Excellent written and spoken English (B2+).

Required skills

• Venafi
• OpenBao
• Azure Key Vault
• F5
• OPA / Conftest
• Azure Policy
• Entra ID
• Active Directory
• GPOs
• M365 groups
• PaloAlto
• Cloudflare
• SIEM / SOAR
• SAST / DAST / SCA / IAST / ASPM
• CI/CD pipelines

What we offer

• Fully remote work from any location in Armenia.
• Opportunity to shape security tooling for a cutting‑edge internal developer platform.
• Collaborative, governance‑focused environment.