HashiCorp Vault(HCV) Engineer

Job title: HashiCorp Vault(HCV) Engineer

Work location: Remote

A HashiCorp Vault Engineer designs, deploys, and manages secure, highly available secrets management solutions, often in Kubernetes or multi-cloud environments. Key responsibilities include automating secrets lifecycle using Terraform/Ansible, setting access policies, integrating with enterprise systems, and monitoring for security compliance.

Core Responsibilities

• Infrastructure Management: Deploy, configure, and maintain Vault clusters, including handling unseal workflows, replication, and performance optimization.
• Secrets & Security Management: Implement hardening best practices, manage PKI secrets engines, and define authorization/authentication policies.
• Automation: Develop Terraform modules and Ansible playbooks for automated provisioning and configuration management.
• Onboarding & Support: Onboard new applications and developers to Vault, assisting with integration and troubleshooting.
• Monitoring & Security: Monitor Vault health, troubleshoot security events, and ensure compliance with security standards.

Required Skills and Qualifications

• Technical Expertise: Strong experience with HashiCorp Vault (Enterprise), specifically in secrets management and PKI.
• Infrastructure as Code (IaC): Proficient in Terraform, Ansible, and YAML.
• Cloud/DevOps Knowledge: Experience with Kubernetes, OpenShift, or public cloud providers (AWS, Azure, GCP).
• Security Focus: Knowledge of authentication methods, encryption, and Linux hardening (RHEL, SELinux).
• Experience: Usually requires prior experience in DevOps, platform engineering, or security engineering.

Typical Daily Tasks

• Troubleshooting Vault API authentication or secret engines.
• Onboarding new application teams and managing their secret roles.
• Auditing current secrets and updating policies.
• Running maintenance to ensure high availability