Sr. HashiCorp Vault Engineer

Title: Sr. HashiCorp Vault Engineer

Location: 100% Remote

Description:

Primary Focus:

• Execute Vault vision at the enterprise level
• Solve complex Vault issues (L3 engineering)
• Implement solutions for ongoing projects
• Upgrade, scale, and transform Vault from open-source to enterprise-level deployments

Core Technical Expertise

1. Vault Engines & Security

• Hands-on experience with HashiCorp Vault engines:
• KV (Key-Value) – storing secrets
• Transit – encryption-as-a-service
• Transform – tokenization for sensitive data (PII/credit cards)
• Understanding of secrets lifecycle management, policy enforcement, and enterprise-grade configuration
• Experience with payment/PII systems, high-security environments, and compliance (PCI, encryption, tokenization)

2. Authentication Methods

• Configure and maintain enterprise authentication methods:
• Kubernetes Auth (integrate with K8s pods/service accounts)
• AppRole
• LDAP/Active Directory
• Token-based auth
• Provide backend support to application teams, ensuring secure and seamless access

3. Enterprise Backend Engineering / Automation

• L3 engineering: identify and fix issues, implement solutions, maintain enterprise Vault infrastructure
• Hands-on experience with Terraform / Ansible for automation of Vault resources, policy management, cluster configuration, and environment scaling
• Integrate Vault with cloud platforms (AWS, Azure) and Kubernetes
• Support upgrades, architectural transformations, and enterprise-level deployments

4. Enterprise Scale & Architecture

• Experience working in large organizations
• Transform open-source Vault environments to enterprise-grade deployments
• Implement high availability, disaster recovery, and multi-region support
• Design and enforce security policies at scale

5. Soft Skills / Professional Traits

• Strong problem-solving mindset; can take ownership of projects and execute end-to-end
• Ability to collaborate with multiple teams (Kubernetes, DevOps, app teams)
• Experience in documentation, runbooks, and compliance reporting
• Can operate independently with minimal guidance (L3 escalation point)