HashiCorp Vault Engineer

HashiCorp Vault Engineer

Diversity Nexus is seeking a skilled HashiCorp Vault Engineer for a 100% remote, long-term W2 contract role. The ideal candidate will design, deploy, and manage secure, highly available secrets management solutions, often in Kubernetes or multi-cloud environments. This role involves automating secrets lifecycle, setting access policies, integrating with enterprise systems, and ensuring security compliance.

Core Responsibilities:

• Infrastructure Management: Deploy, configure, and maintain Vault clusters, including handling unseal workflows, replication, and performance optimization.
• Secrets & Security Management: Implement hardening best practices, manage PKI secrets engines, and define authorization/authentication policies.
• Automation: Develop Terraform modules and Ansible playbooks for automated provisioning and configuration management.
• Onboarding & Support: Onboard new applications and developers to Vault, assisting with integration and troubleshooting.
• Monitoring & Security: Monitor Vault health, troubleshoot security events, and ensure compliance with security standards.

Required Skills and Qualifications:

• Technical Expertise: Strong experience with HashiCorp Vault (Enterprise), specifically in secrets management and PKI.
• Infrastructure as Code (IaC): Proficient in Terraform, Ansible, and YAML.
• Cloud/DevOps Knowledge: Experience with Kubernetes, OpenShift, or public cloud providers (AWS, Azure, GCP).
• Security Focus: Knowledge of authentication methods, encryption, and Linux hardening (RHEL, SELinux).
• Experience: Usually requires prior experience in DevOps, platform engineering, or security engineering.

Typical Daily Tasks:

• Troubleshooting Vault API authentication or secret engines.
• Onboarding new application teams and managing their secret roles.
• Auditing current secrets and updating policies.
• Running maintenance to ensure high availability.

Key skills/competency

• HashiCorp Vault
• Secrets Management
• PKI
• Terraform
• Ansible
• Kubernetes
• DevOps
• Security Engineering
• Infrastructure as Code
• Cloud Computing