Senior Vault Engineer

Job-:
Information Technology

Location:

TX, United States;
Dallas, TX, United States;
Jersey City, NJ, United States;
Tampa, FL, United States

Schedule:

Full time Posted:
Salary Range:
Senior Associate-75,-USDFeatured Opportunities:
No

FLSA Status:
Exempt Are you ready to make an impact at DTCC?

Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We are committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve.
The Information Technology group delivers secure, reliable technology solutions that enable DTCC to be the trusted infrastructure of the global capital markets. The team delivers high-quality information through activities that include development of essential, building infrastructure capabilities to meet client needs and implementing data standards and governance.

Pay and Benefits:

Competitive compensation, including base pay and annual incentive

Comprehensive health and life insurance and well-being benefits, based on location

Pension / Retirement benefits

Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.

DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).The Impact you will have in this role:

Being a member of CISO Team, this role is for a Senior Vault Engineer to design, implement, and manage enterprise-scale secrets management and machine identity solutions across on-premises and cloud environments. This role requires deep expertise in Hashi Corp Vault, modern authentication and authorization patterns, automation, and zero-trust security principles. The ideal candidate will have experience implementing secure secret delivery mechanisms, short-lived credentials, dynamic secrets, and workload identities while driving adoption of security-first engineering practices across development, operations, and platform teams.

Your

Primary Responsibilities:

Design, deploy, and maintain Hashi Corp Vault infrastructure across on-premises and cloud platforms (AWS or equivalent).Implement and manage secure secret management solutions ensuring high availability, scalability, and resilience.

Configure and support Vault authentication methods  and Vault secret engines.

Integrate Vault with CI/CD pipelines, Kubernetes platforms, cloud services, and enterprise identity providers.

Automate secret provisioning, rotation, access control, and certificate lifecycle management using Infrastructure-as-Code and scripting.

Drive adoption of Zero Trust principles, least-privilege access, and short-lived/ephemeral credentials to eliminate hardcoded secrets.

Develop automation and integrations.

Troubleshoot and resolve issues related to Vault, authentication workflows, PKI, networking, and cloud integrations.

Support compliance, audit, and security requirements within regulated environments.

NOTE:

The Primary Responsibilities of this role are not limited to the details above.

* Qualifications:

Bachelor’s degree and/or equivalent in Cyber Security or related field Min 6 years of relevant experienc

Talents Needed for Success:5+ years of experience in security engineering, cloud infrastructure, platform engineering, or Dev Sec Ops .Deep understanding of authentication, authorization, identity federation, and access management concepts.

Strong experience implementing Vault authentication methods including OIDC, LDAP, Kubernetes, App Role, JWT, AWS IAM, and certificate-based authentication.

Hands-on experience deploying and managing Vault secret engines  including KV, PKI, Database, Transit, AWS/Azure Secrets, SSH, and Dynamic Secrets.

Experience designing solutions using dynamic secrets, leased credentials, and secret rotation frameworks.

Strong understanding of Zero Trust Architecture, machine identities, workload identities, least privilege, and security-by-design principles.

Advanced automation and Dev Ops experience  using Python, Terraform, Jenkins, Git Lab, Groovy, and REST APIs.Experience integrating Vault with Kubernetes, service mesh technologies, and modern platform engineering ecosystems.

Strong troubleshooting skills across…