Identity Encryption Systems Engineer
ManpowerGroup · Brentwood, TN
$75–$80/hrfrom the description
Jul 15, 2026
Brentwood, TN
Jul 21, 2026
What this job asks for AI summary
A contract engineering role focused on designing and maintaining cryptographic and certificate management infrastructure across enterprise environments. Day-to-day work involves integrating platforms such as Keyfactor, HashiCorp Vault, and Azure Key Vault, building a self-service certificate portal, and developing APIs and plugins to automate secrets management within CI/CD pipelines. Suited to a senior PKI and cryptography specialist with strong automation and cloud infrastructure experience.
Senior level · 7+ years · Remote · Contract
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Roughly 610 people nationally plausibly meet what this posting asks for (information security analysts). range 130–920
Applicant volume Moderate — A normal amount of company. The rare requirements below are what will separate a shortlisted application from the rest.
Rare in this occupation — lead with these, and say what you built with them.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $132,021 (middle half $99,961–$167,095). This posting is about at that midpoint.
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (9)
The role is posted through ManpowerGroup/Experis and carries contract-style benefits language ('waiting period', 'weekly pay'), confirming this is a staffing/contract engagement rather than a direct hire.
The 7-10 year figure is tied specifically to 'managing certificate and cryptographic platforms'; the 5-year figure is tied to 'Directory Services or DevOps'. The role-level minimum is set to 7 years accordingly.
Keyfactor is listed as a 'strong preference' within the required qualifications section — it is treated as a hard gate given its placement, but note the posting's own language signals it is the most important differentiator rather than a strict binary screen.
GCP, Azure, and AWS are presented as interchangeable cloud platform options ('such as GCP, Azure…or AWS'); GCP is used as the primary name with the others as alternatives.
SOC classification is Medium confidence: the role is primarily a security/cryptography engineering role (15-1212) but has meaningful systems/infrastructure engineering characteristics that could support 15-1244.
'Secrets management' is retained as a skill because it refers to a concrete, named discipline (secrets management platforms/workflows) central to the role's requirements, not a generic soft concept.
Ignored 1 non-technology phrase(s) as skills (responsibilities/concepts, not named tools): secrets management.
Posting is for a contract engagement — the market benchmarks below price full-time roles, so read the comp comparison with that in mind.
Caller marked this a fully-remote role — scored against the national candidate pool.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.