HashiCorp Vault: Privileged Access Engineer

HireLifeScience; West Point (PA); Hybrid; USD 117,000 - 184,000; Full time

Benefits offered by this job

Annual bonus

Long-term incentive

Comprehensive benefits package

Job summary

Merck is seeking a Privileged Access & Secrets Management Engineer (R3) to design, deploy, and operate HashiCorp Vault across on‑prem and enterprise environments. You will enable secure secrets delivery, rotation, and lifecycle management for build, release, and runtime pipelines.

The role partners across identity, automation, cloud, infrastructure, and application teams to improve audit readiness and reduce cyber risk. A strong background in IAM, Vault, and CI/CD integration is required.

Qualifications

• Bachelor's degree or equivalent experience in CS/IS or related field.
• 5+ years designing, deploying, and supporting HashiCorp Vault on‑premises with integrations to CI/CD, automation, APIs, and deploy/workflows.
• Strong secrets lifecycle management and least‑privilege access concepts for service accounts and apps.

Responsibilities

• Design, deploy, and operate Vault and privileged access capabilities across enterprise environments.
• Develop patterns and onboarding guidance for Vault and secrets management across teams.
• Integrate Vault with CI/CD pipelines, deployment workflows, and automation tools.
• Enable secure secrets injection, rotation, and lifecycle management for build and runtime environments.
• Troubleshoot complex issues and support production operations.

Skills

HashiCorp Vault

IAM / Access Management

Azure Active Directory (AD)

Privileged Access

Secrets Management

Linux

Windows

API Integration

Troubleshooting

Security Analytics

Education

Bachelor's degree in CS/IS or related field

Tools

GitHub Actions

GitLab CI

Jenkins

Azure DevOps

Terraform

Ansible

PowerShell

Python

Job description

Merck is seeking a Privileged Access & Secrets Management Engineer (R3) to design, deploy, and operate HashiCorp Vault across on‑prem and enterprise environments. You will enable secure secrets delivery, rotation, and lifecycle management for build, release, and runtime pipelines.

The role partners across identity, automation, cloud, infrastructure, and application teams to improve audit readiness and reduce cyber risk. A strong background in IAM, Vault, and CI/CD integration is required.