Engineer II - Cloud Platforms - Secrets Management

Job Details

Description & Requirements

who we are

lululemon is an innovative performance apparel company for yoga, running, training, and other athletic pursuits. Setting the bar in technical fabrics and functional design, we create transformational products and experiences that support people in moving, growing, connecting, and being well. We owe our success to our innovative product, emphasis on stores, commitment to our people, and the incredible connections we make in every community we're in.

As a company, we focus on creating positive change to build a healthier, thriving future. In particular, that includes creating an equitable, inclusive and growth-focused environment for our people.

about this team

lululemon Engineering is dedicated to building secure, reliable, and performant products for our guests and partners. We embrace the philosophies of Agile, Dev Ops, and SRE to accelerate our development process and provide the most enjoyable, inclusive, and supportive work environment possible. We believe our journey is more fun when it is collaborative, as we focus on the future instead of the past.

As an Engineer, you will work as part of a global team supported by our business and architecture partners to help us collaboratively develop and deliver industry leading technology solutions that drive lululemon's business goals.

core responsibilities

As an Engineer II, you will bring a high level of technical knowledge, but also an ability to spread knowledge to your co-workers. You will help form the core of our engineering practice at lululemon by contributing to all areas of development and operations (pre-production to production). You will be an example of what good engineering looks like and help others around you refine their skills.

You will be part of a day-to-day production release team and may perform on-call support functions as needed. Having a Dev Ops mindset is the key to success in this role, as Engineers are commonly part of full Dev Ops teams that "own" all parts of software development, release pipelines, production monitoring, security and support.

• • Take part in Agile ceremonies
  • Perform engineering assignments using existing procedures and best practices
  • Conduct research to aid in product troubleshooting and optimization efforts
  • Provide an escalation point and participate in on-call support rotations
  • Actively monitor key metrics and report on trends
  • Participate in our Engineering Community of Practice
  • Contribute to engineering automation, management or development of production level systems
  • Contribute to project engineering design and standards verification
  • Perform reliability monitoring and support as needed to ensure products meet guest expectations

• Completed Bachelor's degree or diploma (or equivalent experience) in Computer Science, Software Engineering or Cybersecurity Engineering preferred; candidates with substantial and relevant industry experience are also eligible 
• Three to five+ years of engineering experience 
• Design, scale, and manage Vault clusters with high availability (HA), disaster recovery (DR), and performance replication for secure, fault‑tolerant operations.
• Implement advanced policy configurations to enforce fine‑grained access control and compliance requirements.
• Develop and maintain secrets automation workflows and rotation strategies to minimize risk and meet security best practices.
• Conduct security audits and integrate compliance checks into cloud and infrastructure workflows to meet regulatory standards.
• Apply deep expertise in Vault internals and plugin architecture to extend functionality and customize deployment.
• Integrate Vault with cloud IAM solutions, including AWS, Azure and GCP for unified identity and access management.

• Create and maintain custom auth methods and secrets engines tailored to application and business needs.
• Leverage Hashi Corp Vault Enterprise features for large‑scale, production‑grade deployments.
• Develop infrastructure as code using Terraform with advanced module design.
• Deploy and manage applications with Vault Agent and Secrets Operator for secure secrets delivery.
• Monitor and analyze performance using cloud native monitoring…