Your Role

As a

HashiCorp Vault & PAM Engineer at Capgemini, you will be responsible for managing enterprise secrets, privileged access solutions, and certificate lifecycle processes to ensure secure application and infrastructure access across hybrid environments.

- Perform application onboarding and offboarding activities in

HashiCorp Vault

, including secret engine configuration, authentication setup, and access provisioning.

- Manage the complete secrets lifecycle including creation, rotation, revocation, and secure storage of credentials using Vault secret engines (KV, DB, PKI).

- Administer and troubleshoot authentication mechanisms including

AppRole

,

Kubernetes Authentication

,

Certificate-Based Authentication

, and TLS integrations.

- Support certificate management activities including certificate issuance, renewal, manual renewals, PKI troubleshooting, and lifecycle governance.

- Collaborate with application, platform, and engineering teams to implement secure credential management, password rotation, disaster recovery onboarding,



audit reporting, and operational support.

Your Profile

- Hands-on experience with

HashiCorp Vault Core and Advanced Features

, including KV, Database, and PKI secret engines, authentication methods, and HCL policy management.

- Strong understanding of

Privileged Access Management (PAM)

concepts including privileged account governance, password rotation, secure credential storage, and access control.

- Expertise in

Certificate Management, PKI, TLS/SSL

, and authentication workflows involving AppRole, Kubernetes, and certificate-based authentication.

- Experience with

Kubernetes including secrets injection, service accounts, Vault integration, and Kubernetes authentication mechanisms.

- Robust automation and cloud platform knowledge using

Python/Bash scripting and integrating Vault with

AWS, Azure, and GCP for secure cloud-native access management.

📌 HashiCorp Vault (India)
🏢 Capgemini
📍 India