Privileged Access & Secrets Engineer (Vault)

HireLifeScience; Rahway (NJ); Hybrid; USD 117,000 - 184,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) plan

Paid holidays

Job summary

Merck is seeking a Privileged Access & Secrets Management Engineer to design, deploy, and operate HashiCorp Vault and privileged access capabilities across global teams. You will enable secure, automated secrets delivery while collaborating with identity, automation, cloud, and application groups.

The role requires 5+ years in Vault deployments, strong secrets lifecycle knowledge, and experience with PAM, CI/CD toolchains, and infra automation. Hybrid work and competitive benefits are offered.

Qualifications

• Bachelor's degree or equivalent experience in CS/IS or related field.
• 5+ years designing, deploying, and supporting HashiCorp Vault in on‑prem environments with CI/CD integrations.
• Strong understanding of secrets lifecycle management and dynamic secrets.
• Experience with privileged account management techniques: vaulting, rotation, least-privilege access.
• Experience integrating security platforms with Windows, Linux/Unix, databases, cloud services, APIs.

Responsibilities

• Design, implement, and support HashiCorp Vault in on‑prem environments.
• Develop patterns and onboarding guidance for Vault and secrets management.
• Support Vault integrations with CI/CD platforms, pipelines, and automation workflows.
• Enable secure injection, retrieval, rotation, and lifecycle management of secrets.
• Integrate PAM with enterprise apps, infra and cloud platforms.

Skills

HashiCorp Vault

CI/CD Automation

Windows/Linux

Secrets lifecycle

Automation scripting

Identity management

Cloud security

Education

Bachelor's degree

Tools

Terraform

Ansible

PowerShell

Python

Active Directory

Entra ID

Job description

Merck is seeking a Privileged Access & Secrets Management Engineer to design, deploy, and operate HashiCorp Vault and privileged access capabilities across global teams. You will enable secure, automated secrets delivery while collaborating with identity, automation, cloud, and application groups.

The role requires 5+ years in Vault deployments, strong secrets lifecycle knowledge, and experience with PAM, CI/CD toolchains, and infra automation. Hybrid work and competitive benefits are offered.