HashiCorp Vault (Enterprise Edition) / IAM Security Engineer

Experis Technology Group; Culpeper (VA); Hybrid; USD 98,000 - 105,000; Full time

Job summary

Experis Technology Group in Culpeper, VA is seeking a HashiCorp Vault (Enterprise Edition) / IAM Security Engineer to secure and automate enterprise environments. This role requires hands-on Vault, Terraform, RHEL, and Ansible expertise, with focus on deployment, hardening, and automation.

The position is hybrid with 3 days on site and on-call rotation. You will collaborate with vendors and internal teams, develop runbooks and ensure high availability of Vault infrastructure, and contribute to

Qualifications

• 5+ years of security management and automation experience.
• 3+ years of HashiCorp Vault Enterprise edition experience.

Responsibilities

• Develop, test and perform OS and software upgrades, and address vulnerabilities.
• Coordinate with vendors and internal teams to ensure availability and integration of Vault infrastructure with MS-AD, monitoring, backup, and SIEM.
• Investigate and resolve issues impacting Vault infrastructure availability.
• Expand services and visibility by reviewing offerings and assisting new applications to adopt and automate.
• Assist application teams with onboarding digital secrets, lifecycle management, and policy enforcement.
• Work with vendor delivery teams to deploy integrated Vault solutions in a highly available configuration.
• Enhance reporting on key metrics and deliverables and ensure team performance.
• Maintain a customer-ready onboarding guide for Secret Management.
• Maintain a runbook for the Secret Management service and administrator guides.
• On-call rotation to support critical incidents.

Skills

HashiCorp Vault Enterprise admin

Terraform hands-on

Red Hat Linux (RHEL 8.x)

RHEL 9 System Administration

Ansible

Python & Scripting

Tools

AWX/Ansible Tower

HashiCorp Vault Enterprise

Job description

Position: HashiCorp Vault (Enterprise Edition) / IAM Security Engineer

Location: Culpeper, VA

Hybrid: 3-days/week Onsite

$71-76/hour

Seeking a HashiCorp Vault / IAM Security Engineer with strong expertise in securing and managing enterprise environments.

The ideal candidate will have hands-on experience with HashiCorp Vault, Terraform, RHEL, and Ansible, and will contribute to the deployment, hardening, and automation of security solutions.

This role requires a proactive individual who can troubleshoot complex issues, integrate platforms, and develop automation workflows.

Key Responsibilities:

• Develop, test and perform OS and software upgrades, prepare for and perform business continuity activities and address vulnerabilities
• Interact with vendor and internal teams to ensure availability of, maintenance, enhancements to, and integrated with all the company ecosystems (MS-AD, monitoring, backup, SIEM, ...) of SSMS /Vault infrastructure
• Investigate and resolve issues that impacts or could potentially impact the availability of SSMS and its Vault infrastructure
• Work with team to expand services and visibility by continuing to review offering, speaking with stakeholders and assisting new application teams to adopt and automate
• Assist application team(s) with onboarding digital secrets to the Secret Management including reviewing environment for authentication method, secrets engine to onboard secrets, assist in developing compliance reporting, policy review/enforcement, end to end lifecycle management activities
• Work with the vendors’ delivery teams, maintaining a detailed design, request the pre-requisites and deploy the selected solutions/features in a highly available, resilient and secure configuration. Ensure the solution is integrated with all the company ecosystems (MS-AD, monitoring, backup, SIEM, ...)
• Enhance and provide regular reporting and accountability on key metrics and agreed upon deliverables and ensure that the team is performing according to them
• Maintain a customer guide that can be reused by the application team(s) for future onboarding actions
• Maintain a runbook for the Secret Management service infrastructure and work with the administrators to maintain and enhance the administrators guide
• On-call on a rotational basis

Required Skills (Must-Have):

• HashiCorp Vault Enterprise administration (deployment in HA, troubleshooting, monitoring, hardening, integrations).
• Terraform hands-on experience (module development).
• Red Hat Linux (RHEL 8.x) experience (troubleshooting, monitoring, hardening).
• RHEL 9 System Administration.
• Ansible experience (developing roles, playbooks, AWX or Ansible Tower).
• Python & Scripting

Preferred Skills (Differential):

• Go development (especially for Vault plugin development).
• Jenkins (pipeline development and automation).
• Splunk (query creation, dashboards, and alerting).
• ELK Stack (integration, queries, alerts, dashboards).
• SELinux (policy development and troubleshooting).

Certifications (Nice to Have):

• HashiCorp Certified: Vault Associate
• Hashicorp Vault Operations Progressional
• Terraform Associate Certification

Soft Skills:

• Strong problem-solving and analytical thinking.
• Excellent communication and documentation skills.
• Ability to collaborate effectively in cross-functional teams.
• Adaptability to rapidly changing environments and technologies.
• Attention to detail and commitment to security best practices.

Qualifications:

5+ years of experience in security management and automation

3+ years of experience with Hashicorp Vault Enterprise edition