Junior IAM Security Engineer

Seeking an  IAM Security Engineer  with strong expertise in securing and managing enterprise environments.
The ideal candidate will have hands‑on experience with  Hashi Corp Vault, Terraform, RHEL, and Ansible , and will be expected to maintain, support and enhance the on‑premises  Swift Secrets Management Service (SSMS)  that is based upon  Hashi Corp Vault Enterprise Edition (Vault) , tools, processes, and technologies including but not limited to:
Develop, test and perform OS and software upgrades, prepare for and perform business continuity activities and address vulnerabilities for our  Hashi Corp Vault Enterprise  infrastructures.
Interact with the vendor and Swift internal teams to ensure availability of, maintenance, enhancements to, and integration with all the Swift ecosystems ( MS-AD, monitoring, backup, SIEM, … ) of SSMS/Vault infrastructure.
Investigate and resolve issues that impact or could potentially impact the availability of SSMS and its Vault infrastructure.
Troubleshoot and monitor performance and security of  Hashi Corp Vault .
Assist application team(s) with onboarding digital secrets to the Secret Management, including reviewing the environment for authentication methods, secrets engines to onboard secrets, assisting in developing compliance reporting, policy review/enforcement, and end-to-end lifecycle management activities.
Work with the team to expand services and visibility by continuing to review the offering, speaking with stakeholders and assisting new application teams to adopt and automate.
Develop and maintain automation workflows using  Ansible .
Develop and maintain  Terraform  modules for secure infrastructure provisioning.
Enhance and provide regular reporting and accountability on key metrics and agreed-upon deliverables and ensure that the team is performing according to them.
Maintain a customer guide that can be reused by the application team(s) for future onboarding actions.
Maintain a runbook for the Secret Management service infrastructure and work with the administrators to maintain and enhance the administrators' guide.
On-call on a rotational basis.
On-site presence for at least 2 days a week (hybrid mode).
Skills and

Required Experience:

Ansible experience  (developing roles, playbooks, AWX or Ansible Tower): 2 years.

Experience with Dev Ops and Dev Ops tooling  (Jira, Git, Jenkins, etc.): 3 years.

Experience with Python and scripting:  2 years.

Experience with Python and scripting:  3 years.
Go development  (especially for Vault plugin): 1 year.
Hashi Corp Vault (Open Source) management  (deployment/upgrade in HA, troubleshooting, monitoring, hardening, integrations): 3 years.
Hashi Corp Vault Enterprise management  (deployment/upgrade in HA, troubleshooting, monitoring, hardening, integrations): 1 year.
Red Hat Linux 7 and 8 system administration  (troubleshooting, monitoring, hardening): 3 years.
Red Hat Linux 9 system administration  (troubleshooting, monitoring, hardening): 1 year.
SELinux  (policy development and troubleshooting): 2 years.