Specialist - Cloud Engineering

Specialist - Cloud Engineering

Primary Skills

HashiCorp Vault Vault Enterprise Secrets Management Secrets Vault Engineer Performance Replication Disaster Recovery Replication Namespaces Integrated Storage Raft PKI Certificates Encryption Machine Identity Credential Rotation AWS IAM EC2 Route53 S3 Terraform Ansible Linux Shell Scripting DevSecOps CICD Jenkins GitHub CircleCI Kubernetes OpenShift IAM PAM Cloud Security High Availability Disaster Recovery Infrastructure as Code

Position Summary

The Secrets Vault Engineer is responsible for engineering automation administration and operational support of the enterprise HashiCorp Vault platform The role ensures secure management of secrets machine identities certificates and privileged credentials across cloud and onpremise environmentsThis position will lead Vault platform modernization disaster recovery implementation performance replication cloud integration automation onboarding of applications and platform resilience initiatives while ensuring compliance with IAM and security standards The engineer will collaborate with application teams infrastructure teams IAM architects security teams and cloud engineering teams to deliver highly available and scalable secrets management services

Key Responsibilities

Vault Platform Engineering

Design build and maintain enterprise HashiCorp Vault environments

Implement and manage Vault clusters replication performance replication PR and disaster recovery solutions

Execute Vault upgrades patching configuration changes and platform lifecycle activities

Support highavailability architectures and resiliency testing

Secrets and Identity Management

Onboard applications and services to Vault using approved authentication methods

Design and implement Vault policies namespaces roles and access controls

Support secrets lifecycle management including creation rotation renewal and revocation of credentials

Enable secure management of machine identities API keys certificates and cloud credentials

Cloud and DevOps Integration

Integrate Vault with AWS Azure and cloudnative services

Automate Vault deployment and configuration using Terraform and Ansible

Partner with application teams to integrate Vault into CICD pipelines including GitHub Jenkins CircleCI and similar platforms

Enable secrets injection and identitybased authentication for cloud workloads

Automation and Engineering Excellence

Develop automation for onboarding offboarding policy management and operational support activities

Build reusable InfrastructureasCode solutions

Improve operational efficiencies through scripting and workflow automation

Drive continuous improvement initiatives to reduce manual effort and operational risk

Monitoring Incident and Problem Management

Monitor Vault performance telemetry audit logs and health metrics

Support critical incidents service restoration and root cause analysis

Troubleshoot replication authentication storage networking and platform issues

Create operational runbooks and knowledge base documentation

Disaster Recovery and Resilience

Support backup recovery replication and failover operations

Validate disaster recovery readiness and recovery procedures

Conduct resilience testing and ensure platform availability objectives are met

Support performance replica enablement and network cutover activities across environments