Sr Software Engineer (HashiCorp Vault)

International Business Machines Corporation; Rochester (MN); Sur place; USD 120 000 - 190 000; Plein temps

Résumé du poste

International Business Machines Corporation (IBM) is seeking a seasoned engineer to design, build, and operate Vault as a service. You will ensure secure, highly available secrets management across Kubernetes and OpenShift environments, blending software development, security engineering, reliability, and cloud platform operations.

This hands-on role requires shipping production-grade features, mentoring engineers, and participating in on-call rotations.

Qualifications

• Hands-on experience building production-grade services in Go with strong testing practices.
• Deep experience managing Kubernetes workloads and platform components.
• Experience designing reliable, scalable distributed systems on AWS, Azure, or GCP.
• Experience operating cloud services with reliability objectives and incident response.

Responsabilités

• Design, build, and operate Vault as a service with secure, scalable deployment.
• Lead end-to-end project delivery from design to troubleshooting.
• Collaborate with internal and external teams to align with real-world requirements.
• Participate in hiring and on-call rotations to support production needs.

Connaissances

Golang

Kubernetes

Cloud platforms

IaC

DevOps

Monitoring

Incident response

Description du poste

Introduction

At IBM Software, we transform client challenges into solutions. Building the world's leading AI-powered, cloud-native products that shape the future of business and society. Our legacy of innovation creates endless opportunities for IBMers to learn, grow, and make an impact on a global scale. Working in Software means joining a team fueled by curiosity and collaboration. You'll work with diverse technologies, partners, and industries to design, develop, and deliver solutions that power digital transformation. With a culture that values innovation, growth, and continuous learning, IBM Software places you at the heart of IBM's product and technology landscape. Here, you'l have the tools and opportunities to advance your career while creating software that changes the world.

Your role and responsibilities

We're looking for a seasoned engineer to design, build, and operate HashiCorp Vault as a service. You'll be responsible for secure, highly available, and compliant secrets management services, delivered at scale across Kubernetes and OpenShift environments. This is a hands‑on engineering role combining software development, security engineering, reliability, and cloud platform operations. You'll build the systems, , automation, and developer experiences that enable customers to securely run mission‑critical workloads on the cloud.

• Apply advanced technical expertise to design, prototype and implement customer‑facing product features and tools while ensuring stability and usability

• Deliver creative, effective solutions while understanding cross‑functional interdependencies.

• Lead the application of existing products and services, and influence the development of new policies and ideas.

• Own and drive the reliable execution of large projects (typically spanning 4‑12 weeks), including end‑to‑end design, full lifecycle implementation, and troubleshooting.

• Evaluate trade‑offs, propose solutions, remove blockers, and communicate progress to stakeholders.

• Collaborate directly with internal teams, customers, and external communities to design solutions based on real‑world requirements.

• Advocate for technical roadmap initiatives that improve systems and organizational effectiveness beyond individual projects.

• Debug and resolve complex issues, review code for quality and patterns, and mentor other engineers.

• Guide team collaboration activities such as pairing and knowledge sharing.

• Participate in hiring by leading interviews for junior candidates and contributing to calibration for mid‑level roles.

• Participate in on‑call rotations, incident management, pairing, and team planning to support production and customer needs.

Required technical and professional expertise

• Extensive hands‑on experience building production‑grade services in Golang, with strong testing and code quality practices.

• Deep experience managing Kubernetes workloads and platform components, including networking, storage, and security.

• Experience designing reliable, scalable, highly available distributed systems on AWS, Azure, or GCP, including disaster recovery strategies.

• Experience operating mission‑critical cloud services, including reliability objectives, operational runbooks, monitoring, and incident response.

• Strong DevOps and cloud‑native mindset, with hands‑on experience implementing Infrastructure as Code (IaC) and automation‑first operational practices.

Preferred technical and professional experience

• Hands‑on experience operating HashiCorp Vault at scale (auth methods, PKI/Transit/KV engines, policies, HA/DR, backups).

• Experience with Openshift, Helm, Kustomize, Terraform, and GitOps workflows (Argo CD/Flux).

• Understanding of TLS/mTLS, certificate management, IAM, and secrets lifecycle.

• Experience with cloud monitoring tools to implement robust observability practices that prioritize metrics, logging and tracing for high reliability and performance.

• Experience partnering with security and compliance teams to build secure‑by‑default platforms and services.

IBM is committed to creating a diverse environment and is proud to be an equal‑opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, caste, genetics, pregnancy, disability, neurodivergence, age, veteran status, or other characteristics. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.