Role Summary

Senior-level HashiCorp Vault Engineer responsible for advanced administration, platform engineering, and reliability of enterprise secrets management solutions. The role focuses on ensuring secure secrets lifecycle management, platform scalability, automation, and alignment with Zero Trust and DevSecOps practices.

Key Responsibilities
- Manage and support HashiCorp Vault clusters (HA setups with integrated storage or external backends).
- Ensure high availability, performance tuning, and optimal configuration of Vault environments.
- Perform advanced troubleshooting for Vault-related issues (auth failures, secret access issues, token lifecycle, performance bottlenecks).
- Monitor platform health, audit logs, and telemetry.
- Design and manage secrets engines (KV, Database, PKI, Transit, Cloud secrets).
- Configure and manage authentication methods (LDAP, AD, Kubernetes, AppRole, OIDC).
- Implement fine-grained policies and access controls (ACLs).
- Manage token lifecycle, leases, and secret rotation.
- Integrate Vault with enterprise platforms:




- Kubernetes / OpenShift
- CI/CD pipelines (Jenkins, GitHub Actions, Azure DevOps)
- Cloud environments (Azure, AWS, GCP)
- Automate secret injection, energetic secrets provisioning, and credential rotation.
- Develop scripts using APIs, CLI, Terraform, or Ansible for onboarding and lifecycle automation.
- Enforce secure secrets management practices aligned with Zero Trust and least privilege models.
- Manage encryption-as-a-service using Vault transit engine.
- Enable audit logging and support forensic investigations.
- Support compliance requirements (audit evidence, access tracking, policy validation).
- Perform upgrades, patching, and version management for Vault clusters.
- Design and maintain Disaster Recovery (DR) and replication (performance, DR clusters).
- Conduct failover testing and resilience validation.
- Handle certificate management and TLS configurations.
- Lead L3-level incident resolution and r

📌 PAM Engineer (Bengaluru)
🏢 State Street
📍 Bengaluru