HashiCorp Vault SME

The Federal Aviation Administration (FAA) is seeking a highly skilled System Engineer to serve as a senior technical Hashi Corp Vault SME responsible for the design, implementation, automation, security, and sustainment of enterprise cloud infrastructure and Dev Sec Ops  capabilities. The engineer serves as the technical subject matter expert for Hashi Corp Vault, providing leadership in enterprise secrets management, privileged credential management, encryption, certificate management, and secure application integration across cloud and hybrid environments.

$170,000 - $180,000

Essential Job Functions may include (but are not limited to) the following:

The following duties are considered essential to the role. Reasonable accommodations may be made to enable individuals with disabilities to perform these essential functions

• Serve as the FAA's senior technical subject matter expert for Hashi Corp Vault and enterprise secrets-management architecture.
• Design, implement, configure, and administer highly available Vault environments across cloud, hybrid, and on-premises infrastructure.
• Develop enterprise Vault architectures supporting centralized secrets management, dynamic credentials, encryption, PKI, certificates, and application authentication.
• Establish Vault policies, name spaces, authentication methods, secret engines, roles, access controls, and governance standards.
• Integrate Vault with AWS, Red Hat Open Shift, Kubernetes, CI/CD pipelines, applications, databases, and enterprise services.
• Implement dynamic secrets and short-lived credentials to reduce reliance on static credentials and improve security posture.
• Configure and manage Vault authentication methods including Kubernetes, AWS IAM, App Role, LDAP, OIDC, and other enterprise authentication mechanisms.
• Develop and maintain Vault PKI capabilities for automated certificate issuance, rotation, and revocation.
• Implement encryption-as-a-service capabilities using Vault Transit to protect sensitive FAA application data.

Design automated secret rotation and lifecycle-management processes.

• Develop Vault backup, recovery, disaster-recovery, and high-availability strategies.
• Establish monitoring, logging, auditing, and operational procedures for Vault environments.
• Troubleshoot complex Vault availability, authentication, authorization, integration, and performance issues.
• Develop enterprise standards, reference architectures, implementation guides, and operational runbooks for Vault.
• Mentor cloud engineers and development teams on secure Vault implementation and secrets-management best practices.
• Design, build, automate, and maintain secure AWS cloud infrastructure supporting FAA mission and enterprise applications.
• Develop and maintain Infrastructure as Code using Terraform, Ansible, Cloud Formation, or equivalent technologies.

Build automated cloud environments using repeatable, version-controlled, policy-driven deployment processes.

A successful candidate will have

• Bachelor's degree in Computer Science, Information Systems, Engineering, Cybersecurity, or a related technical discipline, or equivalent experience. (Master’s degree preferred).
• 8+ years of experience in cloud engineering, Dev Ops, systems engineering, platform engineering, or related technical disciplines.
• 5+ years of experience with AWS or comparable enterprise cloud platforms.
• Extensive hands‑on experience with Hashi Corp Vault in enterprise environments.
• Demonstrated experience designing and implementing Vault authentication, policies, secret engines, dynamic credentials, PKI, encryption, and audit capabilities.
• Strong experience with Kubernetes and/or Red Hat Open Shift.
• Strong…