Engineer, Systems Engineering

Job Purpose

We are seeking a Systems Engineer to lead the evolution of our Secrets Management and Shared Services platform, with a primary focus on Hashi Corp Vault, automation, and secure infrastructure in a fintech environment. This role will drive the design, implementation, and operational excellence of Vault and related services across our on‑premises infrastructure, ensuring scalability, security, and reliability.

You’ll collaborate with security, Dev Ops, and application teams to build automation pipelines, enforce secrets governance, and integrate Vault with critical systems.

• Architect, deploy, and maintain Hashi Corp Vault clusters for high availability and secure secrets management.
• Develop automation scripts and tooling using Python, Shell, and Ansible to streamline operations and enforce security controls.
• Integrate Vault with identity providers, PKI, and application platforms for dynamic secrets delivery.
• Collaborate with Info Sec and Dev Ops teams to define and implement secrets governance policies.
• Build and maintain CI/CD pipelines for secure deployment of Vault and shared services.
• Monitor and troubleshoot Vault performance, access controls, and audit logs.
• Lead efforts to modernize shared services infrastructure with a focus on automation and observability.
• Participate in on‑call rotations and incident response for Vault and related shared services.
• Mentor junior engineers and contribute to internal documentation and knowledge sharing.

• 5+ years of experience in Linux systems engineering (RHEL preferred).
• Hands‑on experience with Hashi Corp Vault in production environments.
• Strong proficiency in Python and Shell scripting for automation.
• Experience with Ansible for configuration management and orchestration.
• Solid understanding of TCP/IP, TLS, and secure communication protocols.
• Familiarity with CI/CD tools (e.g., Jenkins, Git Lab CI) and Infrastructure as Code (Terraform a plus).
• Experience with PKI, certificate management, and identity integration (LDAP, OIDC).
• Knowledge of SRE principles, including monitoring, alerting, and incident management.
• Ability to work in a regulated environment with a focus on security and compliance (e.g., SOC 2, ISO 27001).

• Experience in fintech, crypto, or other security‑sensitive domains.
• Exposure to container platforms (Docker, Kubernetes).
• Familiarity with GCP, AWS, or hybrid cloud environments.
• Understanding of threat modeling, secrets rotation, and zero trust architectures.
• Bachelor’s degree in Computer Science, Engineering, or related field.

Intercontinental Exchange, Inc. is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to legally protected characteristics.