Sr DevOps​/Cloud Operations Engineer - HashiCorp Vault

Sr Dev Ops/Cloud Operations Engineer - Hashi Corp Vault (BH-109897)

Location:

Chandler, United States

Sector:
Banking

We are seeking a highly skilled Dev Ops Support Engineer with strong expertise in Hashi Corp Vault and cloud infrastructure to support enterprise-grade secrets management platforms across AWS, Azure, and GCP environments. This role will be responsible for the day-to-day operations, monitoring, incident management, platform maintenance, and onboarding support for Vault services used by application and platform engineering teams.

The ideal candidate will possess strong operational experience in cloud-native environments, secrets management, IAM integration, Infrastructure as Code (IaC), and production support practices.

• Operate, monitor, and maintain Hashi Corp Vault clusters across AWS, Azure, and GCP, ensuring platform availability, performance, and reliability.
• Perform routine operational activities including Vault sealing/unsealing, leadership verification, snapshot validation, health checks, and disaster recovery readiness assessments.
• Support and maintain Vault Raft storage clusters, monitor replication status, and coordinate recovery procedures when required.
• Execute Vault upgrades, patching, configuration updates, and maintenance activities following established change management processes.
• Validate backup and automated snapshot processes, including cloud-based backup storage solutions.

• Support onboarding of applications and services to Vault using authentication mechanisms such as AWS IAM Auth, OIDC, App Role, and other approved methods.
• Assist application teams with policy creation, role configuration, access troubleshooting, and security best practices.
• Manage secret lifecycle operations including creation, rotation, renewal, revocation, and auditing.
• Provide operational guidance and support for Vault integrations across enterprise applications.

• Collaborate with Security, IAM, and Platform Engineering teams to ensure compliance with enterprise security standards and non-human identity management requirements.
• Enforce least-privilege access principles and platform governance standards.
• Support audits, compliance reviews, and security assessments related to secrets management and privileged access controls.

• Monitor Vault health, telemetry, logs, and alerts using enterprise observability and logging platforms.
• Act as an escalation point for Vault-related incidents, performing troubleshooting, root cause analysis, and resolution coordination.
• Participate in incident, problem, and change management processes aligned with ITIL and SRE practices.
• Contribute to post-incident reviews and continuously improve operational runbooks and support procedures.
• Support disaster recovery testing, failover exercises, and platform resilience validation across node, availability zone, and regional failure scenarios.

• Maintain and support Infrastructure-as-Code (IaC) environments using Terraform, Ansible, and JSON-based configurations.
• Partner with engineering teams to integrate Vault into CI/CD pipelines and deployment workflows using tools such as Git Hub Actions, Jenkins, and CircleCI.
• Support Vault integrations with container orchestration platforms including Open Shift, Rancher, and Kubernetes-based environments.

• 5+ years of experience supporting enterprise infrastructure, Dev Ops, or cloud platforms.
• Hands‑on operational experience supporting and administering Hashi Corp Vault or Cyber Ark in production environments.
• Strong knowledge of AWS services including IAM, EC2, VPC, networking, and S3.
• Experience supporting high‑availability (HA) and disaster recovery (DR) architectures in cloud environments.
• Strong understanding of secrets management, privileged access management (PAM), non‑human identities, and least‑privilege security models.
• Experience with Infrastructure as Code (IaC) tools including Terraform, Ansible, and JSON‑based configurations.
• Experience troubleshooting authentication, authorization, access control,…