Senior Vault Engineer: Secrets Automation & Kubernetes

U.S. Bank; Gresham (OR); On-site; USD 120,000 - 141,000; Full time

Benefits offered by this job

Healthcare

401(k) Plan

Paid vacation

Paid holidays

Adoption assistance

Sick leave

Job summary

U.S. Bank is seeking a Senior HashiCorp Vault Engineer to support an enterprise secrets-management platform. You will own Vault configuration, maintenance, upgrades, automation, and integrations with Kubernetes, APIs, and internal applications.

Responsibilities include incident support, architecture improvements, and collaboration with security, infra, and development teams to ensure high availability and secure credential management across production environments.

Qualifications

• Hands-on Vault admin in production environments.
• Background in information security or platform engineering.
• Experience with secrets management, rotation, permissions, and access controls.
• Scripting in Python, Bash, or PowerShell.

Responsibilities

• Engineer, administer, maintain, patch, and upgrade the Vault platform.
• Support secure credential storage, retrieval, and automated rotation for internal apps.
• Troubleshoot integrations, APIs, authentication, permissions, and connectivity.
• Develop scripts and automation to improve platform reliability and efficiency.
• Partner with development teams to optimize Vault consumption and integration.

Skills

Vault admin

Security engineering

Secrets management

Python scripting

APIs & integrations

Kubernetes

Git (GitHub/GitLab)

IAM / privileged access

Cross-functional collaboration

Tools

Terraform

Ansible

CI/CD tooling

Job description

U.S. Bank is seeking a Senior HashiCorp Vault Engineer to support an enterprise secrets-management platform. You will own Vault configuration, maintenance, upgrades, automation, and integrations with Kubernetes, APIs, and internal applications.

Responsibilities include incident support, architecture improvements, and collaboration with security, infra, and development teams to ensure high availability and secure credential management across production environments.