DevOps Engineer with HashiCorp Vault Experience

Melbourne (Melbourne)

Job description: DevOps Engineer with HashiCorp Vault Experience

We are a dynamic team specializing in digital engineering, DevOps, data security, cloud infrastructure automation, and enterprise architecture. As part of our commitment to delivering cutting-edge security solutions, we are seeking an experienced DevOps Engineer with hands-on expertise in HashiCorp Vault to join our team. The ideal candidate will help architect, implement, and manage enterprise-grade secrets management solutions across multiple environments.

Job Overview:

As a DevOps Engineer, you will be responsible for designing, deploying, and maintaining HashiCorp Vault clusters, across AWS and on-premise environments. You will collaborate with security architects and application teams to implement secure, automated secrets management solutions using Infrastructure as Code (IaC) and CI/CD tools. Your role will involve automating Vault deployment and configuration using Terraform, consumer onboarding and support the operationalization of Vault ensuring scalability and secure secrets management. and support the operationalization of Vault in a highly scalable and automated environment.

Key Responsibilities:

Design, deploy, and maintain enterprise-grade HashiCorp Vault implementations.

Implement and automate HashiCorp Vault patterns using Terraform.

Act as a HashiCorp Vault SME and provide through leadership around the product.

Configure and implement Vault patterns (authentication methods and secret engines) and complex integrations with consuming applications.

Build and manage CI/CD pipelines using tools such as Jenkins, GitHub Actions, and Git to automate the Vault deployment lifecycle.

Develop and maintain automation scripts using Bash, Python, or Go to support Vault-related operations and tasks.

Design and implement secure and scalable infrastructure using Terraform and Ansible.

Collaborate with application teams to onboard secrets into Vault, ensuring optimal use of namespaces and policies.

Configure AWS resources to support Vault infrastructure, such as EC2 instances, ALB, EBS volumes, and KMS for auto-unsealing.

Troubleshoot Vault issues, support performance tuning, and manage Vault upgrades and patches.

Ensure monitoring, logging, and alerting are in place to proactively identify and resolve Vault issues.

Work closely with security and DevOps teams to ensure seamless integration of Vault into the broader security architecture.

Required Skills and Experience:

5+ years of experience in implementing enterprise-grade, platform-agnostic secrets management solutions using HashiCorp Vault.

Proven experience in automating Vault patterns using Terraform.

Proficiency in scripting languages such as Bash, Python, and Go.

Hands-on experience in implementing CI/CD pipelines using tools like Jenkins, GitHub Actions, and Git.

Demonstrated ability to design and implement secure and scalable infrastructure using Infrastructure as Code (IaC) tools like Terraform and Ansible.

Strong experience in creating and managing AWS resources (e.g., EC2, ALB, EBS, KMS).

Excellent work ethics, attention to detail, and ability to learn new technologies quickly.

Strong troubleshooting skills, with the ability to resolve issues in complex setups.

Familiarity with SRE practices and managing Vault SLAs.

Knowledge of multi-tenant environments and how to configure Vault namespaces for optimal licensing and security.

Education & Certification:

Master’s or Bachelor's degree in Computer Science, Information Technology, or related field (or equivalent experience).

HashiCorp product certifications is a plus.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the Tech Aalto Privacy Policy, a copy of which is published at Tech Aalto’s website (https://www.techaalto.com/privacy/)

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.