Senior Security Engineer (AppViewX & HashiCorp)

Job Descriptions:

Must have over all 10+ Years exp

Participates in the following areas in the deployment and integration of relevant tool sets:

• Primary (must have any 2):
• Certificate Management (AppViewX)
• Secrets Management (HashiCorp Vault)
• Secondary (good to have):
• CyberArk (Privileged Access Management)
• Identity Services (Sailpoint)
• Single Sign On (Ping Identity)
• Database Access Monitoring (Imperva)
• Hardware Security Modules (Thales Payshield HSM/Luna HSM)
• Cipher Trust Manager (CTM) and CTVL (Tokenization Engine)

Detailed requirement for Primary toolset AppViewX

• Certificate Lifecycle Management: Expert-level knowledge of automated renewal, revocation, and provisioning.
• Protocol Understanding: Deep comprehension of SSL/TLS, SSH, X.509 certificates, CSR generation, and Public Key Infrastructure (PKI) hierarchies.
• CA Integration: Hands-on experience integrating and managing external and internal Certificate Authorities (e.g., Microsoft CA, Venafi, DigiCert, Entrust)
• OS & Platforms: Strong command of Linux and Windows Server administration.
• Scripting Languages: Proficiency in Python and REST APIs for creating custom integrations and automating manual workflows.
• Network Infrastructure: Basic understanding of Load Balancers, Firewalls, and Web Servers (e.g., F5 BIG-IP, NGINX, Apache, IIS) to which certificates are deployed.

Detailed requirement for Primary toolset – HashiCorp

• Design, implement and sustain a centralized secrets management system using HashiCorp Vault
• Installation and Operationalization of HashiCorp Vault and Consul/Raft storage components both OnPrem and Cloud
• Hands on experience in HashiCorp Vault integration with target application for secrets management using varied auth methods – LDAP, AppRole, Kubernetes
• Experienced as a security professional in installing, managing & monitoring of HashiCorp Vault
• Hands on experience in configuration and migration of storage from Consult to Raft (Integrated storage)
• Integration of Vault with Jenkins and Kubernetes for seamless credential injection.
• Experience in deployment of HashiCorp Vault Enterprise on Linux servers, utilizing OpenShift/VMWare for high availability
• Experienced in troubleshooting production issues on HashiCorp Vault related to App Role, Secrets, Namespace, KV engine, Transit engine, varied authentication methods.
• Good coordination with project Architects, Developers, Change Management and Infrastructure support team
• Knowledge of security controls such as encryption, vulnerability assessment, SIEM
• Demonstrated experience at hardening of HashiCorp Vault as per industry standards
• Basic knowledge of network infrastructure – Load Balancer, Data center affinity etc.
• Knowledge of Vault Disaster Recovery and High Availability strategies