Senior Vault Engineer: Secrets Management & Automation

Us Bank; Minneapolis (MN); On-site; USD 120,000 - 141,000; Full time

Benefits offered by this job

Healthcare

Life Insurance

Disability

Parental leave

401(k)

Paid vacation

Holidays

Adoption assistance

Sick leave

Job summary

U.S. Bank is seeking a Senior HashiCorp Vault Engineer to own and enhance an enterprise secrets-management platform used to securely store, rotate, and retrieve credentials. You will partner with developers, security, and infra teams to deliver a scalable, secure credential-management service.

The role demands hands-on Vault experience in production, strong collaboration, and automation skills. Location requires working from a U.S. Bank site at least three days per week.

Qualifications

• Hands-on experience administering, engineering, and supporting HashiCorp Vault in a production environment.
• Strong information security, infrastructure engineering, or platform engineering background.
• Experience with secrets management, credential security, password rotation, permissions, and access controls.
• Scripting, coding, or automation experience using Python, Bash, PowerShell, or a comparable language.
• Experience using and troubleshooting APIs and integrations between applications and security platforms.
• Experience partnering with software developers and understanding application workflows.
• Understanding of platform architecture, resiliency, scalability, load balancing, and high-availability environments.
• Knowledge of Kubernetes and containerized application environments.
• Hands-on experience using Git and Git-based platforms (GitLab/GitHub) for source code repository management, including multi-branch pull/merge request workflows and code review.
• Strong technical communication and cross-functional collaboration skills.

Responsibilities

• Engineer, administer, maintain, patch, and upgrade the HashiCorp Vault platform.
• Support secure credential storage, retrieval, and automated password rotation for internal applications.
• Troubleshoot application integrations, APIs, authentication, permissions, database connectivity, load balancing, and infrastructure dependencies.
• Develop and maintain scripts and automation that improve platform administration, reliability, and efficiency.
• Partner with application development teams to understand Vault consumption patterns and resolve integration issues.
• Contribute to platform architecture, modernization, scalability, resiliency, security, and high-availability improvements.
• Work with Kubernetes and infrastructure teams to support enterprise deployments and integrations.
• Apply IAM and privileged-access principles to platform permissions, access controls, and credential security.
• Support production incidents and help maintain platform availability and operational stability.
• Serve as a technical subject matter expert and share Vault knowledge and best practices with team members.
• Create and maintain technical and end-user documentation.

Skills

Vault

Security

Kubernetes

Python

Bash

PowerShell

APIs

Git

Collaboration

Automation

Tools

GitLab/GitHub

Job description

U.S. Bank is seeking a Senior HashiCorp Vault Engineer to own and enhance an enterprise secrets-management platform used to securely store, rotate, and retrieve credentials. You will partner with developers, security, and infra teams to deliver a scalable, secure credential-management service.

The role demands hands-on Vault experience in production, strong collaboration, and automation skills. Location requires working from a U.S. Bank site at least three days per week.