Platform Engineer

We are seeking a highly skilled HashiCorp Vault Engineer to join our Data Protection Engineering team. This role focuses on designing, implementing, and managing secure secrets management solutions in enterprise environments. The ideal candidate will have strong experience in Vault, Linux systems, automation, and encryption technologies, along with the ability to operate independently in a fast-paced, production-critical environment.

Key Responsibilities

• Design, implement, and manage a highly available and secure HashiCorp Vault platform with minimal supervision
• Automate Vault provisioning, configuration, and lifecycle management using Terraform and Ansible
• Establish and enforce best practices for secrets management, authentication, and authorization
• Work on advanced Vault features including:
  • Static & dynamic secrets
  • PKI secrets engine
  • Database secrets
  • Namespace management
• Troubleshoot complex issues such as:
  • HA failures
  • Unseal processes
  • Authentication method issues
  • Secret engine misconfigurations
• Integrate Vault with Kubernetes, cloud platforms, and multi-cloud environments
• Optimize system performance, replication, and scalability of Vault deployments
• Collaborate with cross-functional teams including security, platform engineering, and application teams
• Provide guidance and onboarding support to engineering teams on Vault usage
• Drive improvements in automation, reliability, and security posture
• Participate in on-call rotation to support production environments
• Work with vendors to resolve technical issues and ensure platform stability
• Create and maintain technical documentation and engineering standards

Required Qualifications

• Strong experience with HashiCorp Vault (design, implementation, and operations)
• Hands-on experience with Linux (Red Hat preferred)
• Experience with HSMs, encryption technologies, or security appliances
• Solid understanding of authentication methods, RBAC, PKI, and secrets management
• Experience with Terraform and Ansible (automation & IaC)
• Strong scripting skills (e.g., Bash, Python, or similar)
• Experience supporting production environments and incident management
• Knowledge of Kubernetes authentication and cloud integrations
• Excellent troubleshooting and problem-solving skills
• Strong written and verbal communication skills

Preferred Qualifications

• Experience in enterprise-scale environments
• Familiarity with multi-cloud architectures (AWS, Azure, Google Cloud Platform)
• Experience with Vault replication and performance tuning
• Prior experience working with security and compliance teams