Platform Engineer – Hashi Vault IRC

Platform Engineer – Hashi Vault IRC
298441 Function

Software Product Engineering

5-10 years

United Kingdom - London

• CI/CD Tools
• Git Hub Actions
• Hashi Corp Vault
• Ubuntu
• Version Control GIT/Git Hub
• CI/CD Tools Git Hub Actions

This role is all about building robust, scalable, and automated platform foundations. Your day‑to‑day may involve infrastructure provisioning, automation pipelines, platform reliability improvements, and building tooling to support wider engineering teams. We’re looking for someone who brings core platform engineering expertise, thrives in highly automated environments, and can flex across different aspects of the platform as priorities evolve.

• Proven experience as a Platform Engineer, Dev Ops Engineer, or SRE
• Strong background in Secrets Management using Hashi Vault
• Solid understanding of Dev Ops principles, CI/CD pipelines, and system automation
• Strong grasp of platform reliability, resilience, and scalability best practices
• Ability to work independently, adapt quickly, and collaborate effectively across engineering teams
• Excellent communication skills for both technical and cross‑functional stakeholders

• Deploy and maintain the lifecycle of Hashi Corp Vault clusters across multiple environments (Dev, Stage, Prod)
• Ensure 99.9% uptime through proper configuration of storage backends (Raft or Consul) and unseal workflows (Auto‑unseal via KMS/Cloud HSM)
• Perform seamless version upgrades and scale the infrastructure to handle increasing request volumes
• Secrets Lifecycle & Governance
• Implement and manage various secret engines, including KV, Dynamic Secrets (AWS, Azure, SQL databases), and PKI for automated certificate issuance
• Write and enforce “Least Privilege” access policies using HCL to ensure users and machines only see what they absolutely need
• Integrate Vault with identity providers such as LDAP, Okta, OIDC, and cloud‑native IAM roles
• Act as the primary consultant for engineering teams to migrate hardcoded secrets/environment variables into Vault
• Secure CI/CD pipelines (Git Hub Actions, Git Lab, Jenkins) by injecting secrets at runtime using Vault agents or injectors
• Provide guidance to developers on using Vault APIs and client libraries (e.g., HVAC for Python, Spring Cloud Vault)
• Security, Auditing & Compliance
• Monitor and analyze Vault audit logs to detect anomalous behavior or unauthorized access attempts
• Establish and regularly test backup/restore procedures and replication (Performance vs. DR replication)
• Automate the rotation of long‑lived credentials to minimize the blast radius of a potential leak

• Comprehensive health and wellness plan, private healthcare, and discounted gym memberships
• Competitive pension scheme
• Recognition schemes through bonus/reward initiatives
• Annual volunteering day
• Hybrid working model

We are an equal opportunities employer. It is our policy to promote an environment free from discrimination, harassment and victimisation.