Lead Systems Engineer, Secrets and Vault Engineering
Core
Design, build, and maintain platform services for secrets management, certificate lifecycle, encryption key management, and policy enforcement for enterprise applications.
Role type
Senior IC systems engineer (secrets and vault engineering)
Builds
Production-grade secrets and machine-identity services, automation tooling, and self-service models for application teams.
Domain
Cybersecurity, Identity and Access Management (IAM), Cryptography
Required skills
HashiCorp Vault, Python, Ansible, Linux systems, RESTful APIs, CI/CD tooling, Infrastructure-as-Code (Terraform), TLS/OAuth/OIDC/x.509 protocols
Preferred skills
SPIFFE/SPIRE, Open Policy Agent (OPA), Post-quantum cryptography (PQC), Cloud platforms (AWS/GCP), Kubernetes/Docker, Threat modeling, Zero trust architectures
Technologies
HashiCorp Vault, Python, Ansible, Terraform, Jenkins, GitHub Actions, GitLab CI, SPIFFE/SPIRE, OPA, AWS Secrets Manager, KMS, Docker, Kubernetes, OpenShift
Responsibilities
Design and maintain platform services for secrets and key management; Develop automation and tooling in Python and Ansible; Collaborate with cross-functional teams to translate requirements into reliable services; Participate in code reviews, design reviews, and architecture discussions; Mentor and coach engineers; Participate in a light on-call rotation.
Seniority
Senior, hands-on IC with design and architecture responsibilities
