Sr. Security Engineer - HashiCorp Vault at The Hartford United States

The Hartford; United States; On-site; USD 127,200 - 190,800; Full time

Job summary

The Hartford is seeking a Sr. Security Engineer to lead engineering of HashiCorp Vault within their Information Protection organization. This role entails technical support for directory services, process automation, and disaster recovery testing.

With over 2 years in HashiCorp Vault and 4 in directory services, candidates should have strong technical backgrounds and decision-making capabilities. The compensation ranges from $127,200 to $190,800 annually based on experience.

Qualifications

• 2+ years supporting HashiCorp Vault.
• 4+ years supporting directory services and/or identity management.
• Broad technical background in multiple authentication types: approle, Kerberos, LDAP, etc.
• Experience with performance clusters and DR clusters.

Responsibilities

• Lead engineering and maintenance of HashiCorp Vault.
• Provide technical expertise and support for disaster recovery testing of Vault.
• Design and implement process automation for Vault.

Skills

Supporting HashiCorp Vault

Supporting directory services/identity management technologies

Configuring secrets engines

PowerShell knowledge

C# .NET proficiency

Audit log analysis proficiency

Education

BS or MA in Engineering, Computer Science, Information Security, or related field

Job description

Sr. Security Engineer – HashiCorp Vault

The Hartford’s Information Protection (THIP) organization is seeking a senior security engineer to lead the engineering and maintenance of directory services platforms, with a focus on HashiCorp Vault.

Responsibilities

• Provide technical expertise for engineering and support of HashiCorp Vault, including monitoring overall health, ensuring currency, stability, and implementing required changes, patches, and upgrades.
• Lead technical support for disaster recovery and cyber resilience testing of Vault, including planning, testing, and support activities, while reviewing and designing improvements to current processes.
• Spearhead the growth of Vault into AWS, developing the integration plan, new infrastructure, design patterns, and a roadmap for implementation and support.
• Design and implement process automation for Vault, reviewing current implementations and creating more efficient and automated solutions.

Qualifications

• 2+ years supporting HashiCorp Vault.
• 4+ years supporting directory services and/or identity management technologies.
• Broad technical background, fluent in multiple authentication types and patterns such as approle, Kerberos, LDAP, Kubernetes, OIDC, etc.
• Expert knowledge in configuring various secrets engines (LDAP, AWS, KV2, etc.).
• Strong understanding of best practices with short‑lived credentials and token TTLs.
• Experience with performance clusters and DR clusters.
• Knowledge of PowerShell and C# .NET.
• Proficiency in Splunk and audit log analysis is beneficial.
• Strong overall knowledge of Windows servers.
• Track record in production support and system support activities.
• Strong decision‑making capabilities, proven ability to weigh costs and benefits and identify appropriate actions.
• Confidence to influence others to modify opinions, plans, or behaviors.
• Excellent prioritization skills and ability to break down work into manageable parts.
• Organizational skills enabling work on several tasks simultaneously.
• Original and innovative thinking, with a record of developing and implementing process improvement initiatives.
• BS or MA in Engineering, Computer Science, Information Security, or a related field preferred.
• Candidate must be authorized to work in the United States without company sponsorship; the company will not support STEM OPT I‑983 endorsement.

Compensation

The listed annualized base pay range for this role is $127,200 – $190,800, depending on experience and performance.

Equal Opportunity Employer

Equal Opportunity Employer / Sex / Race / Color / Veterans / Disability / Sexual Orientation / Gender Identity or Expression / Religion / Age.