DevOps Engineer with HashiCorp Vault Experience

Role overview

Key responsibilities

• Design, deploy, and maintain enterprise-grade HashiCorp Vault implementations.
• Automate Vault patterns using Terraform and build CI/CD pipelines with Jenkins, GitHub Actions, and Git.
• Develop Bash, Python, or Go automation scripts for Vault operations.
• Design secure infrastructure using Terraform and Ansible.
• Onboard application secrets into Vault and manage namespaces and policies.
• Configure AWS resources such as EC2, ALB, EBS, and KMS for Vault infrastructure and auto-unsealing.
• Troubleshoot Vault issues, tune performance, manage upgrades and patches, and maintain monitoring, logging, and alerting.
• Collaborate with security, DevOps, and application teams on Vault integration and secrets management.

Required skills and experience

• At least 5 years of experience implementing enterprise-grade, platform-agnostic secrets management solutions using HashiCorp Vault.
• Proven experience automating Vault patterns using Terraform.
• Proficiency in Bash, Python, and Go scripting languages.
• Hands-on experience implementing CI/CD pipelines with Jenkins, GitHub Actions, and Git.
• Experience designing secure and scalable infrastructure with Terraform and Ansible.
• Strong experience creating and managing AWS resources including EC2, ALB, EBS, and KMS.
• Strong troubleshooting skills in complex environments.
• Knowledge of multi-tenant environments and Vault namespace configuration for licensing and security.

Education and certification

• A bachelor's or master's degree in Computer Science, Information Technology, or a related field, or equivalent experience, is required.
• HashiCorp product certifications are advantageous but not required.

Technical environment

• The role uses HashiCorp Vault, Terraform, Ansible, Jenkins, GitHub Actions, Git, Bash, Python, Go, AWS, and Infrastructure as Code.
• The work includes Vault authentication methods, secret engines, consuming-application integrations, namespaces, policies, monitoring, logging, and alerting.