Security Advisor Senior - HashiCorp

About the role

Senior Security Advisor

We’re looking for a Senior Security Advisor to join our growing team.

• Become Vault Hashi Corp's internal expert, including secrets management, advanced features and best practices.
• Implementation and optimization: collaborate with teams to develop detailed implementation plans, manage our Kubernetes Vault deployments across both AWS and GCP environments (OCP and GKE), and ensure high availability and operational readiness, including disaster recovery.
• Maximize the security potential of Vault by ensuring secure, auditable, and restricted access to secrets.
• Strategy and influence: contribute to and influence the organization's Vault strategy, optimizing its use and developing its capabilities for broad internal adoption.
• Identify and resolve issues with the implementation, replication, and day‑to‑day use of Vault.
• Handle 24/7 on‑call support for incidents on a rotational basis.
• Create and maintain documentation and optionally provide training to other team members on Vault.
• Automation and self‑serve: manage the design and implementation of security solutions throughout the product lifecycle, empowering development teams with self‑serve secret management, automated CI/CD pipeline integrations, and secure artifact handling.
• Act as an expert on information security domains such as security architecture, application security, threat modeling, and related areas.

• Bachelor’s degree in computer science or any combination of equivalent education and experience.
• Minimum 5 years of experience in information technology, including at least three years in the secrets management space (Hashi Corp Vault).
• Proven hands‑on experience administering Vault (Enterprise preferred), including configuration of secrets engines (KV v2, Transit, Database, PKI), auth methods (OIDC/JWT, AWS/GCP IAM, Kubernetes), name spaces, policies, audit devices, and replication (performance/DR).
• Terraform / HCP Terraform (strong prerequisite): deep operational experience using HCP Terraform to manage Vault and cloud resources via IaC, including modules, work spaces, policy checks, and environment promotion.
• Multi‑cloud experience (strong asset): practical experience operating Vault‑integrated platforms on AWS and GCP, including cloud IAM and KMS integrations for auto‑unseal and short‑lived credentials.
• Kubernetes knowledge: experience deploying and operating Vault on OCP and GKE, including injector/agent patterns, Kubernetes auth, and platform‑specific considerations.
• Proficiency with CI/CD systems, programming (Python or Java preferred), and automation frameworks. Experience enabling secure artifact and container management is highly beneficial.
• Strong understanding of modern security principles, secrets lifecycle management, least privilege, auditability, and compliance‑aligned controls.
• Excellent communication, stakeholder management, and problem‑solving skills; ability to influence and drive cross‑team adoption.
• Demonstrated commitment to training, self‑learning and maintaining proficiency in the technical cybersecurity domain.
• Vault Associate certification good to have; CKA certification is an asset.
• For candidates located in Quebec, bilingualism is required to interact on a regular basis with English‑speaking colleagues across the country.
• No Canadian work experience required; must be eligible to work in Canada.

Pay at Intact is about much more than salary.

• Flexible work arrangements and a hybrid work model.
• Possibility to purchase up to 5 extra days off per year.
• Multiple benefits supporting physical and mental well‑being, including telemedicine and Wellness account.
• Share plan & other savings: up to 12% of salary or more (guaranteed income for life). Employee Share Purchase Plan matches 50% of net shares.
• Pension offering of guaranteed income for life via defined benefit plan.

Salary range (not limited to): 101,800 – 124,400 per year.

Annual bonus target based on base salary, with a potential payout of up to double the target, subject to personal and company performance.

Salary will be determined considering factors such as experience, skills, qualifications, anticipated contribution, internal equity, etc. Salary range is based on a 35‑hour workweek.

We are an equal‑opportunity employer.

We encourage applications from members of equity‑deserving groups, including but not limited to women, Indigenous peoples, persons with disabilities, Black people, and members of the 2

SLGBTQI+ community.

If we can provide a specific adjustment to make the recruitment process more accessible, please let us know.

Intact does not provide sponsorship or other support for immigration‑related matters. Candidates must be eligible to work in Canada from the anticipated start date and throughout employment.

Internal candidates should apply via the Internal Career Site.

#LI-Hybrid