Platform engineer in secrets management

GlobalLogic; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid work model

Health and wellness plan

Private healthcare

Pension scheme

Annual volunteering day

Team social events

Job summary

GlobalLogic Inc. seeks a Platform Engineer/DevOps specialist to lead a greenfield, fully automated data center deployment, building robust, scalable platform foundations.

You will manage Vault clusters, implement secret engines, enforce least privilege, and integrate identity providers while supporting CI/CD pipelines and developer usage. Hybrid work model and strong benefits accompany the role.

Qualifications

• Experience with Hashi Vault in production environments.
• CI/CD automation and platform reliability experience.
• Strong understanding of security best practices and least privilege.

Responsibilities

• Manage Vault clusters across Dev, Stage, Prod environments.
• Configure storage backends and unseal workflows for reliability.
• Implement KV, Dynamic Secrets, and PKI engines for automated certs.

Skills

HashiCorp Vault

DevOps

CI/CD

Platform engineering

SRE

Automation

Tools

Terraform

Kubernetes

GitHub Actions

Jenkins

Vault agents

Job description

Описание: You’ll play a key hands‑on role in a greenfield, fully automated data center deployment, contributing across the full platform lifecycle—from infrastructure design and automation to system integration and operational enablement. This role is all about building robust, scalable, and automated platform foundations. Your day‑to‑day may involve infrastructure provisioning, automation pipelines, platform reliability improvements, and building tooling to support wider engineering teams.

Задачи

• Manage the lifecycle of HashiCorp Vault clusters across multiple environments (Dev, Stage, Prod). Ensure 99.9% uptime through proper configuration of storage backends (like Raft or Consul) and unseal workflows (Auto-unseal via KMS/Cloud HSM). Perform seamless version upgrades and scale the infrastructure to handle increasing request volumes
• Implement and manage various secret engines, including KV (Key-Value), Dynamic Secrets (AWS, Azure, SQL databases), and PKI (Public Key Infrastructure) for automated certificate issuance
• Write and enforce "Least Privilege" access policies using HCL (HashiCorp Configuration Language) to ensure users and machines only see what they absolutely need
• Integrate Vault with identity providers such as LDAP, Okta, OIDC, and cloud-native IAM roles
• Act as the primary consultant for engineering teams to migrate hardcoded secrets/environment variables into Vault
• Secure CI/CD pipelines (GitHub Actions, GitLab, Jenkins) by injecting secrets at runtime using Vault agents or injectors
• Provide guidance to developers on using Vault APIs and client libraries (e.g., HVAC for Python, Spring Cloud Vault)
• Monitor and analyze Vault audit logs to detect anomalous behavior or unauthorized access attempts
• Establish and regularly test Backup/Restore procedures and replication (Performance vs. DR replication)
• Automate the rotation of long-lived credentials to minimize the blast radius of a potential leak

Требования

• Proven experience as a Platform Engineer, DevOps Engineer, or SRE
• Strong background in Secrets Management using Hashi Vault
• Solid understanding of DevOps principles, CI/CD pipelines, and system automation
• Strong grasp of platform reliability, resilience, and scalability best practices
• Ability to work independently, adapt quickly, and collaborate effectively across engineering teams
• Excellent communication skills for both technical and cross-functional stakeholders

Условия

Our goal is to build an inclusive positive culture where everyone can feel comfortable being themselves, empowering people to create their own high standards and therefore more value. We work together to promote fairness while recognising, valuing and embracing differences - providing a transparent support structure and generous training budget to help our people develop skills to progress their career.

• Hybrid model that can flex across a wide spectrum of working options determined by business, customer and individual needs
• You’ll benefit from a comprehensive health and wellness plan, private healthcare (clinical and mental wellbeing), discounted gym memberships, in office yoga sessions and massages
• We offer a fantastic benefits package including a competitive pension scheme and recognition schemes through bonus/reward initiatives
• Colleagues are entitled to an annual volunteering day - so you can take time to support a cause close to your heart
• We also love to stay social with trips to the zoo, quiz nights, sports events, theatre trips and much more