24 hours ago
Tokyo, JapanStaff+
Responsibilities
- Own the end-to-end technical architecture of the PAM and Secret Management platform across on-premises, OneCloud, AWS, Azure, and GCP.
- Design and implement Just-in-Time access, Zero Standing Privileges, Break-the-Glass workflows, identity-provider integrations, and ticketing-based approval workflows.
- Write production code and infrastructure-as-code, review implementations, and enforce standards for security, reliability, and maintainability.
- Define secure development, DevOps, CI/CD, secrets-handling, audit-logging, and incident-response practices.
- Collaborate with QA engineers on test strategy and acceptance criteria for a security-critical platform.
- Evaluate vendors and tools and represent the team in architecture and vendor discussions.
- Mentor junior and mid-level DevOps and development engineers and serve as the team’s technical escalation point.
- Coordinate with managers, project managers, and stakeholders on technical delivery, timelines, and budget.
- Ensure high availability and disaster recovery across regions.
Requirements
- More than 5 years of experience in software engineering and/or DevOps, including technical leadership or mentoring experience.
- Strong hands-on skills in software development, DevOps/infrastructure, and security.
- Experience with AWS, Azure and/or GCP, OneCloud, and on-premises or hybrid infrastructure.
- Understanding of IAM, SSO and identity-provider integration, RBAC, Just-in-Time access, and Zero Trust principles.
- Working knowledge of CI/CD pipelines and the relationship between privileged access, secrets, build, and deployment workflows.
- Familiarity with test strategy for security-critical systems and the ability to review QA output.
- Strong communication skills for explaining technical trade-offs to technical and non-technical stakeholders.
- Practical experience with secret-management or privileged-access technologies such as HashiCorp Vault, Boundary, CyberArk, Teleport, Delinea, or BeyondTrust is preferred.
- Experience building a security or access-management platform from scratch is preferred.
- Exposure to PCI-DSS or FSA requirements is preferred.
- Experience with Kubernetes and service-account or machine-to-machine credential management is preferred.
- Japanese language proficiency is a plus but is not required.
Tech Stack
About Rakuten
Rakuten Group builds e-commerce marketplaces, financial services (credit cards, payments, banking, securities), and digital/communications offerings for consumers and merchants worldwide. It monetizes through transaction fees, financial services income, advertising, and mobile subscriptions; flagship businesses include Rakuten Ichiba, Rakuten Card, and Rakuten Mobile. Founded in 1997 and headquartered in Setagaya, Tokyo, the company is publicly listed on the Tokyo Stock Exchange and operates across many countries and regions.