Senior Vault Engineer: Secrets, Automation & Vault Ops

U.S. Bank; Minneapolis (MN); On-site; USD 120,000 - 141,000; Full time

Job summary

U.S. Bank is seeking a hands-on HashiCorp Vault engineer to design, secure, and operate Vault across production systems in Minnesota. You will collaborate with DevOps and security teams to ensure secret management, high availability, and robust access controls.

Ideal candidates have strong platform engineering background, experience with APIs, scripting, and IaC tools, and a proven ability to work with developers on secure integrations. Join a team driving modernization and secure infrastructure.

Qualifications

• Hands-on experience administering HashiCorp Vault in a production environment (Vault admin).
• Strong information security, infrastructure, or platform engineering background.
• Experience with secrets management, credential security, password rotation, permissions, and access controls.
• Scripting, coding, or automation using Python, Bash, PowerShell, or similar.
• Experience troubleshooting APIs and integrations between apps and security platforms.
• Experience partnering with software developers and understanding application workflows.
• Understanding platform architecture, resiliency, scalability, load balancing, and high-availability environments.
• Knowledge of Kubernetes and containerized app environments.
• Hands-on experience using Git and Git-based workflows (GitLab/GitHub) for code review.
• Strong technical communication and cross-functional collaboration skills.

Responsibilities

• Engineer, administer, maintain, patch, and upgrade the Vault platform.
• Support secure credential storage, retrieval, and automated password rotation for internal applications.
• Troubleshoot application integrations, APIs, authentication, permissions, etc.
• Develop and maintain scripts and automation to improve platform administration, reliability, and efficiency.
• Partner with application development teams to understand Vault consumption patterns and resolve integration issues.
• Contribute to platform architecture, modernization, scalability, resiliency, security, and high-availability improvements.
• Work with Kubernetes and infrastructure teams to support enterprise deployments and integrations.
• Apply IAM and privileged-access principles to platform permissions, access controls, and credential security.
• Support production incidents and help maintain platform availability and operational stability.
• Serve as a technical subject matter expert and share Vault knowledge with team members.
• Create and maintain technical and end-user documentation.

Skills

Vault administration

Security engineering

Secrets management

Password rotation

Access controls

API integration

Developer collaboration

Platform architecture

Kubernetes

Git workflows

Tools

HashiCorp Vault

Kubernetes

Git/GitHub

GitLab

Terraform

Ansible

Job description

U.S. Bank is seeking a hands-on HashiCorp Vault engineer to design, secure, and operate Vault across production systems in Minnesota. You will collaborate with DevOps and security teams to ensure secret management, high availability, and robust access controls.

Ideal candidates have strong platform engineering background, experience with APIs, scripting, and IaC tools, and a proven ability to work with developers on secure integrations. Join a team driving modernization and secure infrastructure.