HashiCorp Vault

HashiCorp Vault

Job Description

Role: HashiCorp Vault Engineer / Administrator

Key Responsibilities:

• Design, implement, configure, and administer HashiCorp Vault.
• Manage application secrets, credentials, API keys, certificates, and other sensitive information.
• Configure and maintain KV secrets engines, dynamic secrets, PKI, and authentication methods.
• Configure authentication methods such as AppRole, Kubernetes, LDAP/AD, AWS IAM, and OIDC.
• Create and manage Vault policies, tokens, roles, and access controls.
• Implement dynamic credentials for databases, cloud platforms, and other services.
• Integrate Vault with Kubernetes, CI/CD pipelines, cloud platforms, and applications.
• Configure Vault high availability and support disaster-recovery procedures.
• Monitor Vault health, performance, audit logs, and security events.
• Troubleshoot authentication, authorization, connectivity, and secret-access issues.
• Manage Vault upgrades, patches, configuration changes, and certificate renewals.
• Implement security best practices around least privilege and secrets rotation.
• Automate Vault configuration using Terraform, Ansible, or scripting.
• Work with DevOps, cloud, security, and application teams to onboard applications to Vault.
• Develop documentation and operational procedures.