Lead HashiCorp Vault/Secrets Engineer

Prestige Staffing; Jacksonville (FL); On-site; USD 130,000 - 145,000; Full time

Benefits offered by this job

Healthcare

401(k)

Life insurance

Paid time off

Job summary

Prestige Staffing seeks a Lead Systems Engineer to join our Secrets and Vault Engineering team within IAM. You will design, automate, and maintain enterprise secrets platforms using HashiCorp Vault to support AI/ML and non-human identity initiatives.

The role emphasizes production Vault expertise, automation via Python and Ansible, and shaping platform security and architecture in a forward-thinking organization.

Qualifications

• 7+ years of infrastructure, platform, or systems engineering experience.
• Production experience with HashiCorp Vault, including secret engines and policy management.
• Proficiency in Python and Shell scripting for automation.
• Experience with Ansible for configuration management and orchestration.
• Strong understanding of TLS, OAuth, OIDC, and x.509 identity protocols.
• Familiarity with CI/CD tools (Jenkins, GitHub Actions, GitLab CI) and Terraform.
• Solid knowledge of Linux systems and RESTful API design.

Responsibilities

• Design, develop, and maintain secrets management, certificate lifecycle, encryption keys, and policy enforcement services.
• Automate operations using Python and Ansible to improve efficiency, security, and reliability.
• Develop self-service tooling for application teams, including templates and approval workflows integrated with Enterprise systems like ServiceNow.
• Collaborate with cross-functional teams to translate security and operational requirements into robust platform solutions.
• Contribute to the team’s strategic roadmap around workload identity and policy-as-code.

Skills

HashiCorp Vault

Python

Shell scripting

Identity protocols

CI/CD tools

Terraform

Linux

RESTful APIs

Platform architecture

Tools

Jenkins

GitHub Actions

GitLab CI

Terraform

Ansible

ServiceNow

Job description

Pay

$130,000 - $145,000 + 30% bonus

Location

100% On-site — JAX or ATL

Summary

We are seeking a highly skilled Lead Systems Engineer to join our Secrets and Vault Engineering team within the Identity and Access Management division. This critical role focuses on building, automating, and maintaining enterprise-level secrets management platforms, including HashiCorp Vault, to support advanced initiatives in AI/ML, non-human identity access management, and post-quantum cryptography. The ideal candidate will possess extensive hands-on experience with Vault in production, automation expertise, and a strategic mindset to influence future platform architecture and security posture. This is an excellent opportunity to lead innovative projects in a stable, forward-thinking organization, and to take ownership of the evolving cryptographic and identity solutions integral to enterprise security.

Requirements

• 7+ years of infrastructure, platform, or systems engineering experience
• Proven production experience with HashiCorp Vault, including secret engines, authentication methods, and policy management
• Proficiency in Python and Shell scripting for automation
• Experience with Ansible for configuration management and orchestration
• Strong understanding of identity and authentication protocols (TLS, OAuth, OIDC, x.509)
• Familiarity with CI/CD tools (Jenkins, GitHub Actions, GitLab CI) and Infrastructure-as-Code (Terraform preferred)
• Solid knowledge of Linux systems and RESTful API design
• Ability to communicate complex design concepts and trade-offs effectively
• Demonstrated experience in designing and operating secure, scalable platform services

Responsibilities

• Design, develop, and maintain secrets management, certificate lifecycle, encryption keys, and policy enforcement services
• Automate operations using Python and Ansible to improve efficiency, security, and reliability
• Develop self-service tooling for application teams, including templates and approval workflows integrated with enterprise systems like ServiceNow
• Collaborate with cross-functional teams to translate security and operational requirements into robust platform solutions
• Contribute to the team’s strategic roadmap, especially around emerging areas like workload identity, policy-as-code, and non-human identity governance for AI/ML workloads
• Participate in architecture discussions, code reviews, and mentorship activities
• Maintain internal documentation, runbooks, and best practices
• Support services through a light on-call rotation
• Competitive salary commensurate with experience
• Stimulating work with cutting‑edge cryptography, AI, and identity projects
• Opportunity to shape enterprise-level security architecture and platform strategy
• Strong, stable organization with excellent growth prospects
• Comprehensive healthcare, 401(k), life insurance, and paid time off