Senior Vault Engineer: Secrets, Kubernetes & Automation

US Bank; Minneapolis (MN); On-site; USD 140,000 - 190,000; Full time

Job summary

U.S. Bank is seeking a Senior HashiCorp Vault Engineer to support a production-grade secrets-management platform used by internal applications to securely store, retrieve, and rotate credentials.

You will build, secure, and operate Vault within a large enterprise, collaborating with development and infrastructure teams. Responsibilities include implementing automation, ensuring high availability, and integrating Vault with Kubernetes, IAM, and other security controls.

Qualifications

• Hands-on experience administering HashiCorp Vault in production.
• Strong background in information security, infrastructure, or platform engineering.
• Experience with secrets management, credential security, password rotation, and access controls.
• Scripting/automation experience (Python, Bash, PowerShell).
• Experience with APIs and integrations between applications and security platforms.
• Experience partnering with developers and understanding application workflows.
• Knowledge of platform architecture, resiliency, scalability, load balancing, and high-availability.

Responsibilities

• Engineer, administer, maintain, patch, and upgrade the HashiCorp Vault platform.
• Support secure credential storage, retrieval, and automated password rotation for internal apps.
• Troubleshoot integrations, APIs, authentication, permissions, DB connectivity, load balancing, and infra dependencies.
• Develop scripts and automation to improve administration, reliability, and efficiency.
• Collaborate with development teams to understand Vault consumption and resolve issues.
• Contribute to architecture, modernization, scalability, resiliency, security, and HA improvements.
• Coordinate with Kubernetes and infrastructure teams for enterprise deployments.
• Apply IAM and privileged-access principles to platform permissions and credential security.
• Support production incidents and maintain platform availability.
• Share Vault knowledge and best practices as SME; create technical docs.

Skills

Vault Admin

Security Engineering

Secrets Management

APIs & Integrations

Kubernetes

Git Workflows

Automation

Cross-functional

Tools

Terraform

Ansible

GitLab

Kubernetes

GitHub

CI/CD

Job description

U.S. Bank is seeking a Senior HashiCorp Vault Engineer to support a production-grade secrets-management platform used by internal applications to securely store, retrieve, and rotate credentials.

You will build, secure, and operate Vault within a large enterprise, collaborating with development and infrastructure teams. Responsibilities include implementing automation, ensuring high availability, and integrating Vault with Kubernetes, IAM, and other security controls.