Senior Vault Engineer: Secrets Management & Automation

U.S. Bank; Minneapolis (MN); On-site; USD 120,000 - 141,000; Full time

Benefits offered by this job

Healthcare (medical, dental, vision)

Paid vacation

401(k) and retirement plan

Job summary

U.S. Bank is seeking a Senior HashiCorp Vault Engineer to support and enhance an enterprise secrets-management platform used by internal applications to securely store, retrieve, and rotate credentials.

This hands-on role requires managing Vault in a production environment and partnering with development, security, and operations teams. The position focuses on configuration, maintenance, automation, and improvements to ensure secure, scalable credential management across enterprise deployments.

Qualifications

• Hands-on experience administering, engineering, and supporting HashiCorp Vault in a production environment.
• Strong information security, infrastructure engineering, or platform engineering background.
• Experience with secrets management, credential security, password rotation, permissions, and access controls.
• Scripting, coding, or automation using Python, Bash, PowerShell, or a comparable language.
• Experience using and troubleshooting APIs and integrations between applications and security platforms.
• Experience partnering with software developers and understanding application workflows.
• Understanding of platform architecture, resiliency, scalability, load balancing, and high-availability environments.
• Knowledge of Kubernetes and containerized application environments.
• Hands-on experience using Git and Git-based platforms (GitLab/GitHub) for source code repository management, including multi-branch pull/merge request workflows and code review.
• Strong technical communication and cross-functional collaboration skills.

Responsibilities

• Engineer, administer, maintain, patch, and upgrade the HashiCorp Vault platform.
• Support secure credential storage, retrieval, and automated password rotation for internal applications.
• Troubleshoot application integrations, APIs, authentication, permissions, database connectivity, load balancing, and infrastructure dependencies.
• Develop and maintain scripts and automation that improve platform administration, reliability, and efficiency.
• Partner with application development teams to understand Vault consumption patterns and resolve integration issues.
• Contribute to platform architecture, modernization, scalability, resiliency, security, and high-availability improvements.
• Work with Kubernetes and infrastructure teams to support enterprise deployments and integrations.
• Apply IAM and privileged-access principles to platform permissions, access controls, and credential security.
• Support production incidents and help maintain platform availability and operational stability.
• Serve as a technical subject matter expert and share Vault knowledge and best practices with team members.
• Create and maintain technical and end-user documentation

Skills

HashiCorp Vault

Administration

Production environments

Information security

Infrastructure engineering

Platform engineering

Secrets management

Credential security

Password rotation

Permissions

Access controls

Python

Bash

PowerShell

Automation

APIs

Integrations

Git

GitHub

GitLab

Kubernetes

CI/CD (GitHub Actions/Jenkins)

Jenkins

Terraform

Ansible

IaC

Documentation

Technical communication

Cross-functional collaboration

Tools

Kubernetes

Git

GitHub

GitLab

Terraform

Ansible

CI/CD

Jenkins

Job description

U.S. Bank is seeking a Senior HashiCorp Vault Engineer to support and enhance an enterprise secrets-management platform used by internal applications to securely store, retrieve, and rotate credentials.

This hands-on role requires managing Vault in a production environment and partnering with development, security, and operations teams. The position focuses on configuration, maintenance, automation, and improvements to ensure secure, scalable credential management across enterprise deployments.