Senior Hashicorp PKI Engineer

*We are unable to sponsor for t8+ month straight contract role*

Prestigious Financial Company is currently seeking a Hashicorp Vault Specialist. Candidate will support the Privileged Access Management (PAM) team responsible for the HashiCorp Vault secrets management implementation across the enterprise. This individual will work with the PAM team to design, implement, and automate new HashiCorp Vault features introduced to secrets management environment. The position will include heavy interaction with Architecture, PAM, Platform Automation, Cloud Automation, and end-users for the duration of the HashiCorp Vault project.

Responsibilities:
Support the installation and configuration of HashiCorp Vault Infrastructure and configuration management. Participate in all design sessions for HashiCorp Vault in multiple datacenters and private cloud and provide knowledge of HashiCorp Vault architecture and configurations. Help build secrets management capabilities to support the implementation of HashiCorp Vault. Support ability to maintain development, pre-production, and production HashiCorp Vault environments. Assist in building and maintaining secure integrations with HashiCorp Vault for automated secrets retrieval between applications. Participate in the creation of a strategy and solutions design for presentation to Architecture Review Board. Design should include (but not limited to) Systems requirements, secured platforms, disaster recovery, capacity sizing, and availability planning. Cover on premise, hybrid, and/or cloud infrastructure, and recommendations of using HashiCorp Vault solution to secure cloud workloads on all major cloud platforms. Enterprise integrations review, including group policies, directory, authentication methods, monitoring strategies, and other relevant technologies and security tools. Hybrid Model and requirements with On-Prem high availability vaults Implementation of secured jump server and network segmentation Auth Methods, Secrets Engines, and Policies implementation to support application workload onboarding. Support defining phased implementation approach (eg, AWS, production, disaster recover, backup datacenter) including priorities and phases for component implementations and secure connections configurations. Participate in the development of future strategy to change architecture for the vaults (eg, distributed vaults on-prem and in AWS, disaster recovery) Work with PAM Team and Platform Automation Team to deploy HashiCorp Vault in AWS. Assist with installing and configuring the relevant Servers into existing HashiCorp vault production environments. Assist with testing, troubleshooting, and validating functionalities of HashiCorp Vault components. Assist with configuring the HashiCorp Vault advanced monitoring solution via audit and metric collection. Work with PAM Team to successfully deploy HashiCorp Vault Servers in AWS via Terraform pipeline. This will require an Ansible role for HashiCorp Vault. Support development and deployment of HashiCorp Vault components in automated delivery to multiple datacenters and network zones. As directed, draft Confluence documentation Complete knowledge transfer to staff, as needed.

Qualifications:
Extensive knowledge in HashiCorp Vault functionality, administration, and architecture. 5+ Years HashiCorp Vault experience at the engineering level 2+ Years cloud services implementation in AWS. Deep technical knowledge of HashiCorp Vault components, functionality, and requirements 2+ Years implementing and integration of HashiCorp Vault across a variety of applications, services, and systems. 2+ Years in CI/CD deployments using terraform. 2+ Years in Scripting/development using Bash/PowerShell/Python Experience in API development using Flask or Fast API Experience with Jira, Powerbroker, Ansible Certification in at least one or more of the following: AWS Solutions Architect or relevant experience HashiCorp Vault DevOps security or related