会社名

楽天グループ株式会社

会社概要

未来を信じ、より良い明日を創っていく。
イノベーションを通じて、人々と社会をエンパワーメントする。私たちは、そんな想いを大切に世界の人々に喜びと楽しさを届けます。
楽天は、E コマース、FinTech、デジタルコンテンツ、通信など、70 を超えるサービスを展開し、世界10 億以上のユーザーに利用されています。
これら様々なサービスを、楽天会員を中心としたメンバーシップを軸に有機的に結び付け、他にはない独自の「楽天エコシステム」を形成しています。ダイバーシティ推進は、楽天にとって最優先の企業戦略のひとつです。従業員の出身は70カ国・地域以上。世界中からユニークで多様な文化的背景や視点を持つ優秀な人材が集まり、イノベーションの原動力になっています。社内カフェテリアにはベジタリアン、ハラル対応のメニューを用意。礼拝所（Prayer room）もあります。
また、仕事と育児の両立支援や、障がい者雇用・活躍促進も積極的に推進。社内のLGBT（※1）当事者やアライ（※2）に対して、情報共有やサポート体制の強化も進めています。誰もが自分らしく力を最大限発揮して働ける。それが楽天のダイバーシティです。

70を超えるサービスを提供し、世界30カ国にサービス展開拠点を持ち、従業員の出身国・地域数は100を超え、オープンポジション制度を活用して多様なキャリアを描くことができる点も魅力です。
フレックスタイム制度、事情に応じたリモートワークの活用が可能です。本社には託児所やフィットネスジム、三食無料で利用可能なカフェテリアが併設されるなど、社員を支える環境が整備されています。

ポジション

1038047　Technical Lead, PAM & Secret Management - Cloud Management Department (CMD)

仕事内容

Department Overview
The Cloud Management Department (CMD) leads Rakuten's unified cloud infrastructure strategy by providing governance and essential tools to ensure seamless operation and high satisfaction among service providers and users. As the central point for strategy, planning, and process governance, we manage the cloud product portfolio, budgeting, quality, and security. Furthermore, we empower cross-departmental success through robust cloud foundation and management solutions.

Within CMD, the Access Management Group is newly formed to build, integrate, and maintain a centralized Privileged Access Management (PAM) and Secret Management platform, replacing fragmented legacy access solutions with Zero Standing Privileges, Just-in-Time access, Break-the-Glass emergency access, and centralized secret management across on-premises infrastructure and public cloud.

Position:
This is a newly created team and a build-from-scratch initiative. We are hiring a Technical Lead to be the team's senior technical reference from day one, setting the architecture and engineering standards for the platform and growing the team around it.

Position Details

・Own the end-to-end technical architecture of the PAM and Secret Management platform, covering on-premise infrastructure, Rakuten's internal cloud (OneCloud), and public multi-cloud environments (AWS, Azure, GCP)
・Design and implement Just-in-Time access, Zero Standing Privileges, and Break-the-Glass workflows, including integration with identity providers (Okta, Entra ID) and ticketing systems (e.g., Jira) for approval workflows
・Write production code and infrastructure-as-code, and review the team's implementations, holding a high bar for security, reliability, and maintainability
・Define and enforce secure development, DevOps, and operational practices (CI/CD, secrets handling, audit logging, incident response) across the team
・Collaborate closely with QA engineers to define test strategy and acceptance criteria for a security-critical system, without owning QA execution directly
・Lead technical evaluation of vendors and tools, and represent the team in architecture and vendor discussions
・Mentor and grow junior and mid-level Dev/DevOps engineers, and act as technical escalation point for the team
・Partner with the Group Manager, Project Manager, and stakeholders across CPSD to align technical delivery with project timelines and budget
・Ensure the platform meets high-availability and disaster-recovery requirements across regions

Work Environment
You'll lead a cross-functional team composed of Development, DevOps, and QA members, spanning a range of seniority levels, and you will report to the Group Manager. Your technical decisions will have direct and lasting impact on a strategic platform, with visibility to senior stakeholders across the organization.

求める経験・スキル

Mandatory Qualifications:
・More than 5 years of experience in software engineering and/or DevOps roles, including prior technical leadership or mentoring experience
・Strong hands-on skills across development, DevOps/infrastructure, and security, comfortable being the most senior engineering voice on all three fronts
・Solid understanding of cloud platforms (AWS, Azure, and/or GCP), Rakuten's internal cloud (OneCloud), and on-premise/hybrid infrastructure
・Experience with identity and access concepts: IAM, SSO/IdP integration (Okta, Entra ID), RBAC, Just-in-Time access, Zero Trust principles
・Working knowledge of CI/CD pipelines and how privileged access and secrets intersect with build and deploy workflows
・Comfortable working with and reviewing the output of QA engineers, with familiarity with test strategy for security-critical systems
・Strong communication skills, able to explain technical trade-offs to both engineers and non-technical stakeholders

Desired Qualifications:
・Practical experience with secret management and/or privileged access management technologies (e.g., HashiCorp Vault, Boundary, CyberArk, Teleport, Delinea, BeyondTrust, or similar)
・Experience building a security or access management platform from scratch, rather than only operating an existing one
・Exposure to compliance frameworks relevant to financial services (e.g., PCI-DSS, FSA requirements)
・Experience with Kubernetes and service-account/machine-to-machine credential management
・Japanese language proficiency, a plus but not required