HashiCorp Vault (Enterprise Edition) / IAM Security Engineer

Cybersecurity Jobs; Culpeper (VA); Hybrid; USD 98,000 - 105,000; Full time

Job summary

Experis is hiring an IAM Security Engineer to deploy, harden, and automate security solutions using HashiCorp Vault, Terraform, and Red Hat Linux in Culpeper, VA. This hybrid role requires collaboration with vendor and internal teams to maintain a secure, highly available Vault infrastructure.

The ideal candidate has 5+ years in security management, Vault Enterprise experience, and strong Ansible, automation, and scripting skills to support enterprise ecosystems and reporting.

Qualifications

• HashiCorp Vault Enterprise administration including HA, troubleshooting, monitoring & integrations
• Terraform module development and hands-on experience
• Red Hat Linux (RHEL 8.x) and RHEL 9 system administration
• Ansible experience including roles/playbooks; AWX or Ansible Tower
• Python scripting to automate security workflows

Responsibilities

• Develop, test, and perform OS and software upgrades
• Prepare for and perform business continuity activities
• Address vulnerabilities affecting OS, software, and Vault infrastructure
• Coordinate with vendor and internal teams for availability and maintenance of SSMS/Vault infrastructure
• Support integrations with MS-AD, monitoring, backup and SIEM
• Investigate and resolve issues impacting Vault infrastructure availability
• Expand service offerings by reviewing the offering with stakeholders
• Assist application teams to adopt and automate secure workflows
• Onboard digital secrets to Secret Management and configure secrets engine
• Review and enforce policies; contribute to compliance reporting
• Runbooks and detailed designs for Secret Management infrastructure
• Rotational on-call support

Skills

Vault Enterprise administration

Terraform hands-on

RHEL 8.x administration

RHEL 9 administration

Ansible/AWX/Tower

Python scripting

Tools

AWX

Ansible Tower

HashiCorp Vault Enterprise

Terraform

Python

Job description

Experis is hiring an IAM Security Engineer to deploy, harden, and automate security solutions using HashiCorp Vault, Terraform, and Red Hat Linux in a hybrid environment from Culpeper, VA.

Responsibilities

• Develop, test, and perform OS and software upgrades
• Prepare for and perform business continuity activities
• Address vulnerabilities affecting OS, software, and Vault-related infrastructure
• Coordinate with vendor and internal teams to ensure availability, maintenance, and enhancements of SSMS/Vault infrastructure
• Support integrations with enterprise ecosystems, including MS-AD, monitoring, backup, and SIEM
• Investigate and resolve issues that impact or could impact availability of SSMS and the Vault infrastructure
• Expand service offerings and visibility by reviewing the offering and collaborating with stakeholders
• Assist application teams to adopt and automate secure workflows
• Onboard digital secrets to Secret Management by:
  • Reviewing environments for authentication method
  • Selecting and configuring the secrets engine for onboarding
  • Assisting in development of compliance reporting
  • Reviewing and enforcing policies
  • Supporting end-to-end lifecycle management
• Work with vendor delivery teams to maintain detailed designs, confirm prerequisites, and deploy selected features in a highly available, resilient, and secure configuration
• Ensure integrated operation across MS-AD, monitoring, backup, and SIEM
• Enhance and deliver regular reporting and accountability on key metrics and agreed deliverables
• Maintain a customer guide reusable by application teams for future onboarding
• Maintain a runbook for Secret Management service infrastructure and support administrators with an administrators guide
• Provide rotational on-call support

Requirements

• HashiCorp Vault Enterprise administration including deployment in HA, troubleshooting, monitoring, hardening, and integrations
• Terraform hands-on experience, including module development
• Red Hat Linux (RHEL 8.x) experience for troubleshooting, monitoring, and hardening
• RHEL 9 system administration
• Ansible experience, including developing roles and playbooks, plus AWX or Ansible Tower
• Python & scripting

Technologies

• HashiCorp Vault Enterprise Edition
• Terraform
• RHEL 8.x
• RHEL 9
• Ansible
• AWX
• Ansible Tower
• Python

Preferred / Differential Skills

• Go development, especially for Vault plugin development
• Jenkins pipeline development and automation
• Splunk query creation, dashboards, and alerting
• ELK Stack integration, queries, alerts, and dashboards
• SELinux policy development and troubleshooting

Certifications (Nice to Have)

• HashiCorp Certified: Vault Associate
• Hashicorp Vault Operations Professional
• Terraform Associate Certification

Qualifications

• 5+ years of experience in security management and automation
• 3+ years of experience with Hashicorp Vault Enterprise edition

Additional Notes

• Location: Culpeper, VA (hybrid)
• Salary: USD 71 - 76 per hourly
• Minimum Experience: 3 years