[Hiring] Secrets Vault Engineer @Tata Consultancy Services

Role Description

The Secrets Vault Engineer is responsible for engineering, automation, administration, and operational support of the enterprise HashiCorp Vault platform.

• Ensures secure management of secrets, machine identities, certificates, and privileged credentials across cloud and on-premise environments.
• Leads Vault platform modernization, disaster recovery implementation, performance replication, cloud integration, automation, onboarding of applications, and platform resilience initiatives while ensuring compliance with IAM and security standards.
• Collaborates with application teams, infrastructure teams, IAM architects, security teams, and cloud engineering teams to deliver highly available and scalable secrets management services.

Key Responsibilities

• Vault Platform Engineering: Design, build, and maintain enterprise HashiCorp Vault environments.
• Implement and manage Vault clusters, replication, performance replication (PR), and disaster recovery solutions.
• Execute Vault upgrades, patching, configuration changes, and platform lifecycle activities. Support high availability architectures and resiliency testing.
• Secrets and Identity Management: Onboard applications and services to Vault using approved authentication methods.
• Design and implement Vault policies, namespaces, roles, and access controls. Support secrets lifecycle management including creation, rotation, renewal, and revocation of credentials. Enable secure management of machine identities, API keys, certificates, and cloud credentials.
• Cloud and DevOps Integration: Integrate Vault with AWS, Azure, and cloud native services.
• Automate Vault deployment and configuration using Terraform and Ansible.
• Partner with application teams to integrate Vault into CI/CD pipelines including GitHub, Jenkins, CircleCI, and similar platforms.
• Enable secrets injection and identity-based authentication for cloud workloads.
• Automation and Engineering Excellence: Develop automation for onboarding, offboarding, policy management, and operational support activities.
• Build reusable Infrastructure as Code solutions. Improve operational efficiencies through scripting and workflow automation.
• Drive continuous improvement initiatives to reduce manual effort and operational risk.
• Monitoring, Incident and Problem Management: Monitor Vault performance, telemetry, audit logs, and health metrics. Support critical incidents, service restoration, and root cause analysis.
• Troubleshoot replication, authentication, storage, networking, and platform issues. Create operational runbooks and knowledge base documentation.
• Disaster Recovery and Resilience: Support backup, recovery, replication, and failover operations. Validate disaster recovery readiness and recovery procedures.
• Conduct resilience testing and ensure platform availability objectives are met.
• Support performance replica enablement and network cutover activities across environments.

Qualifications

• Bachelor & Master degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related technical discipline.
• 5+ years of experience in Infrastructure Engineering, Cloud Engineering, DevOps, SRE, IAM, PAM, or Secrets Management.
• 3+ years of hands-on experience administering and supporting HashiCorp Vault Enterprise in production environments.
• Experience supporting enterprise-scale cloud platforms and highly available distributed systems.

Requirements

• Strong hands-on experience with HashiCorp Vault administration and engineering.
• Experience with Vault Enterprise features including:
  • Namespaces
  • Performance Replication
  • Disaster Recovery Replication
  • Integrated Storage / Raft
  • Audit Logging
  • Authentication Methods
• Strong AWS experience including IAM, EC2, networking, Route53, and S3.
• Experience with Terraform, Ansible, Git, and Infrastructure-as-Code practices.
• Experience with Linux administration and scripting.
• Familiarity with CI/CD pipelines and DevSecOps practices.
• Knowledge of PKI, certificates, encryption, secrets management, and privileged access concepts.
• Experience with container platforms such as OpenShift and Kubernetes.