HashiCorp Vault Security Engineer: CI/CD & Secrets

MSD Malaysia; Rahway (NJ); On-site; USD 117,000 - 184,000; Full time

Job summary

Merck seeks a Privileged Access & Secrets Management Engineer to design, deploy, and operate HashiCorp Vault and privileged access capabilities across on-prem and cloud environments. You will work with identity, automation, cloud, and application teams to reduce cyber risk and enable secure automated secrets delivery.

You will build patterns, onboarding guidance, integrate with CI/CD pipelines, and ensure lifecycle management of secrets from injection to rotation, while maintaining audit

Qualifications

• Bachelor’s degree or equivalent experience in CS/Info Systems.
• 5+ years designing, deploying, and supporting HashiCorp Vault in on-premises environments with CI/CD integrations.
• Strong understanding of secrets lifecycle management including dynamic secrets, engines, and auth methods.
• Experience with privileged account management techniques: vaulting, rotation, least-privilege access, service account security.
• Experience integrating security platforms with Windows, Linux/Unix, databases, cloud services, applications, and APIs.
• Ability to manage multiple priorities, adapt to change, and work in a large, global matrixed organization.
• Strong analytical, troubleshooting, problem-solving, and communication skills.

Responsibilities

• Design, implement, and support HashiCorp Vault on-premises.
• Develop onboarding guidance for Vault and secrets management across teams.
• Support Vault integrations with CI/CD tools, automation, and deployment pipelines.
• Enable secure injection, retrieval, rotation, and lifecycle management of secrets.
• Integrate PAM with enterprise apps, infrastructure, and cloud platforms.
• Troubleshoot complex technical issues and support production operations.
• Develop automation, standards, and audit-ready processes to improve security and efficiency.

Skills

HashiCorp Vault

CI/CD integrations

Secrets lifecycle

Privileged Access

OS: Windows/Linux

Automation/scripting

Troubleshooting

Communication

Education

Bachelor’s degree in CS/Info Systems

Tools

GitHub Actions

GitLab CI

Jenkins

Azure DevOps

Terraform

Ansible

PowerShell

Python

Active Directory/Microsoft Entra ID

Job description

Merck seeks a Privileged Access & Secrets Management Engineer to design, deploy, and operate HashiCorp Vault and privileged access capabilities across on-prem and cloud environments. You will work with identity, automation, cloud, and application teams to reduce cyber risk and enable secure automated secrets delivery.

You will build patterns, onboarding guidance, integrate with CI/CD pipelines, and ensure lifecycle management of secrets from injection to rotation, while maintaining audit