HashiCorp Vault Engineer

HashiCorp Vault Engineer Location: Dallas, TX Work Setup: Hybrid 3 days a week onsite Duration: 8 months with multi-year extensions Work to be performed: This resource will support the Privileged Access Management (PAM) team responsible for the HashiCorp Vault secrets management implementation across the enterprise. This individual will support the migration from legacy HashiCorp Vault for 700+ applications to Security Zone HashiCorp Vault. Provide Services to: • Operations support of HashiCorp Vault Infrastructure and configuration management. • Help buildout secrets management capabilities to support the implementation of HashiCorp Vault across critical business applications that are hybrid. • Support ability to maintain development, pre-production, and production HashiCorp Vault environments. • Assist in building and maintaining secure integrations with HashiCorp Vault for automated secrets retrieval between applications. • Participate in the creation of a strategy and solutions design for governance approval. Design should include (but not limited to)Cover on premise, hybrid, and/or cloud infrastructure, and recommendations of using HashiCorp Vault solution to secure cloud workloads on all major cloud platforms. Enterprise integrations review, including group policies, directory, authentication methods, monitoring strategies, and other relevant technologies and security tools.Auth Methods, Secrets Engines, and Policies implementation to support application workload onboarding. • Support defining phased implementation approach (e.g., AWS, production, disaster recover, backup datacenter) including priorities and phases for component implementations and secure connections configurations. • Participate in the development of future privileged access management strategy • Work with PAM Team to successfully manage HashiCorp Vault servers in AWS via Terraform pipeline. This will require an Ansible role for HashiCorp Vault. • Support development and deployment of HashiCorp Vault components in automated delivery to multiple datacenters and network zones. • Create Confluence documentation for work performed and as directed • Complete knowledge transfer to OCC staff. Requirements: • Extensive knowledge in HashiCorp Vault functionality, administration, and architecture. • Engineering of HashiCorp Vault • Cloud services implementation in AWS • CI/CD deployments using terraform. • Scripting/development using Bash/PowerShell/Python • Deep technical knowledge of HashiCorp Vault components, functionality, and requirements • Experience in implementing and integration of HashiCorp Vault across a variety of applications, services, and systems. • Experience with Jira, Powerbroker, and Ansible