Senior HashiCorp Vault Engineer – Secrets Management & Cloud Security
Cloud Security | HashiCorp Vault | Secrets Management | DevSecOps
Position Overview
Talent Solutions Group is recruiting a Senior HashiCorp Vault Engineer for an established enterprise organization seeking to expand and modernize its secrets management and cloud security infrastructure.
This is a hands-on engineering position focused on the architecture, design, implementation, and automation of HashiCorp Vault environments across cloud and hybrid infrastructure.
We're seeking an engineer who has gone beyond day-to-day administration and has experience building Vault infrastructure, designing secrets management solutions, integrating applications, and automating security controls.
Candidates from cloud security engineering, DevSecOps, infrastructure engineering, and software engineering backgrounds are encouraged to apply if they have strong hands-on HashiCorp Vault experience.
Key Responsibilities
Design, architect, deploy, and enhance enterprise HashiCorp Vault environments.
Engineer Vault clusters supporting cloud and hybrid infrastructure, including multi-region deployments.
Design and implement secrets engines, authentication methods, access policies, and secure application integrations.
Perform capacity planning, infrastructure sizing, and architecture assessments for Vault implementations.
Develop automation and infrastructure-as-code solutions using Terraform, Ansible, and scripting languages.
Integrate Vault with cloud services, Kubernetes, CI/CD pipelines, and enterprise applications.
Develop secure, scalable solutions for secrets lifecycle management, credential rotation, and privileged access.
Improve platform reliability, security, monitoring, and operational efficiency.
Troubleshoot complex engineering issues and provide advanced technical support as part of a senior-level support rotation.
Collaborate with security, cloud infrastructure, application development, and DevOps teams.
Evaluate opportunities to use AI-assisted development and automation tools to improve engineering productivity.
Required Qualifications
Strong hands-on engineering experience with HashiCorp Vault.
Experience designing, building, or implementing Vault clusters, not solely administering existing environments.
Experience configuring and integrating Vault secrets engines, authentication methods, and access policies.
Strong understanding of secrets management, privileged access security, and secure application authentication.
Experience with cloud infrastructure and cloud security architecture.
Proficiency with infrastructure automation, scripting, or software development using technologies such as Go, Python, Bash, PowerShell, Terraform, or Ansible.
Experience integrating security platforms with applications, infrastructure, or CI/CD workflows.
Strong troubleshooting skills and ability to resolve complex infrastructure and security engineering issues.
Ability to work collaboratively with technical teams while independently owning engineering deliverables.
Preferred Qualifications
Experience designing multi-region or hybrid-cloud HashiCorp Vault architectures.
Experience with Go (Golang), particularly for automation, integrations, or software development.
Experience with Kubernetes, AWS IAM, Active Directory, OAuth 2.0, OIDC, or certificate-based authentication.
Experience with PKI, HSMs, Active Directory Certificate Services, or CyberArk.
Familiarity with Jenkins, Terraform, Ansible, and automated deployment pipelines.
Experience with Vault high availability, disaster recovery, replication, and infrastructure sizing.
Experience using AI-assisted coding tools such as Codex, Claude Code, or Gemini CLI.
What Makes This Opportunity Interesting
Work on complex enterprise secrets management architecture.
Design and implement new security infrastructure rather than simply maintain existing systems.
Work with modern cloud security, automation, and DevSecOps technologies.
Collaborate with experienced engineers on technically challenging initiatives.
Influence engineering standards, platform scalability, and security automation.
Apply
Interested candidates should apply through Dice or send their resumes to:
