Senior DevSecOps - Secrets Engineer

Senior Dev Sec Ops  - Secrets Engineer

Company: C.H. Robinson

C.H. Robinson is seeking a skilled Dev Sec Ops  – Secrets Engineer to lead the charge in securing our digital assets through expert management of Hashi Corp Vault. In this pivotal role, you'll be at the heart of our Dev Sec Ops  efforts, engineering, delivering, and operating sophisticated Vault/Secrets solutions.

We solve logistics problems for companies across the globe and across industries, from the simple to the most complex. With $28 billion in freight under management and 2.5X larger than the next largest North American freight broker, we are one of the world’s largest logistics platforms with 100,000 customers and 85,000 contract carriers.

Responsibilities:

• Lead and execute in the full lifecycle of engineering, delivering, and operating Hashi Corp (an IBM Company) Vault solutions.
• Implement and manage Vault services, access policies, and secret engines tailored to team and project needs.
• Design and build new authentication methods to enhance security and efficiency.
• Delivery of the Cloud based secrets and key management technologies, policies, automation, integration, software and systems patching.
• Lead projects and expand coverage to new use cases and achieve cost efficiencies for Vault usage through standardization.
• Monitors and responds to capacity and performance needs of the secrets infrastructure.
• Provide regular reporting/metrics to leadership regarding secrets/vault capacity, usage, and licensing.
• Ensure Vault instances operate with high availability across multiple regions.
• Collaborate with cross-functional teams to ensure seamless solution delivery and operational support.
• Utilize Agile methodologies for project management and workflow processing using Azure Boards.
• Lead projects to develop new security features, manage cloud‑based secrets, and ensure efficient and standardized technology use.
• Conduct proof of concepts to validate secrets management solutions.
• Integrate Vault with various technologies (e.g. Kubernetes).
• Hands‑on experience with Kubernetes deployments.
• Maintain comprehensive documentation and manage the capacity and performance of the secrets infrastructure.
• On‑call support rotation to address critical incidents.
• Exposure to AI/LLM to automate mundane tasks to improve operational excellence and developer experience.

Required Qualifications:

• 5+ years experience with Hashi Corp Vault, including implementation and management.
• 3+ years experience with IaC – Infrastructure as a Code (Terraform, Ansible).
• Good understanding of Kubernetes and containerization environments and its authentication mechanisms.
• Knowledge of other secret management solutions (e.g., Infisical, Akeyless, Delinea) is a plus.
• Knowledge in Identity & Access Management and relevant technologies.
• Strong understanding of cloud services, SaaS, and cybersecurity principles.
• Excellent problem‑solving skills, with the ability to work collaboratively in a team environment.
• Proactive, accountable, autonomous, and solutions oriented.
• Growth mindset to learn and take on new challenges.
• Bachelor’s degree or equivalent work experience and a high school diploma/GED.

Preferred

Qualification:

• Experience with C#, JavaScript and Node.js development is a plus.
• Certification:
  Hashi Corp Vault, Azure Certification is a plus.
• Strong time management and organizational skills.
• Ability to deliver to aggressive deadlines while working complex projects across multiple groups.
• Strong facilitation and communication skills, ability to coordinate and motivate resources.
• Values a diverse and inclusive work environment.

Compensation Range

$93,400.00 - $

The base pay range displayed on each job posting reflects the minimum and maximum base pay for the position across all U.S. locations. Your individual base pay within this range is determined by work location, which takes into account geographic cost of labor, and additional factors, including job‑related skills, experience, and relevant education or training. Compensation details listed in this posting reflect the base pay only and do not include additional variable compensation.

Questioning if you meet the mark? Studies have shown that some individuals…