Security Engineer with HashiCorp Vault exp

Title : Security Engineer with HashiCorp Vault exp
Culpeper, VA
Face to face interview is mandotary

Description

Seeking a IAM Security Engineer with strong expertise in securing and managing enterprise environments. The ideal candidate will have hands-on experience with HashiCorp Vault,
Terraform, RHEL, and Ansible, and will be expected to maintain, support and enhance the on-premises Client Secrets Management Service (= SSMS) that is based upon HashiCorp Vault - Enterprise edition (Vault), tools,
processes, and technologies including but not limited to:

* Develop, test and perform OS and software upgrades, prepare for and perform business continuity activities and address vulnerabilities for our Hashicorp Vault Enterprise infrastructures
* Interact with Vendor and Client internal teams to ensure availability of, maintenance, enhancements to, and integrated with all the Client ecosystems (MS-AD, monitoring, backup, SIEM, ) of SSMS /Vault infrastructure
* Investigate and resolve issues that impacts or could potentially impact the availability of SSMS and its Vault infrastructure
* Troubleshoot and monitor performance and security of HashiCorp Vault
* Assist application team(s) with onboarding digital secrets to the Secret Management including reviewing environment for authentication method, secrets engine to onboard secrets, assist in developing compliance reporting, policy review/enforcement, end to end lifecycle management activities
* Work with team to expand services and visibility by continuing to review offering, speaking with stakeholders and assisting new application teams to adopt and automate
* Develop and maintain automation workflows using ansible.
* Develop and maintain Terraform modules for secure infrastructure provisioning.
* Enhance and provide regular reporting and accountability on key metrics and agreed upon deliverables and ensure that the team is performing according to them
* Maintain a customer guide that can be reused by the application team(s) for future onboarding actions
* Maintain a runbook for the Secret Management service infrastructure and work with the administrators to maintain and enhance the administrators guide
* On-call on a rotational basis

* On-site presence for at least 2 days a week (Hybrid mode)

Required Skills (Must-Have)

- HashiCorp Vault Enterprise administration (deployment in HA, troubleshooting, monitoring, hardening, integrations).
- Terraform hands-on experience (module development).
- Red Hat Linux experience (troubleshooting, monitoring, hardening).
- Ansible experience (developing roles, playbooks, AWX or Ansible Tower).

Preferred Skills (Differential)

- Go development (especially for Vault plugin development).
- Jenkins (pipeline development and automation).
- Splunk (query creation, dashboards, and alerting).
- ELK Stack (integration, queries, alerts, dashboards).
- SELinux (policy development and troubleshooting).

Certifications (Nice to Have)

- HashiCorp Certified: Vault Associate
- Hashicorp Vault Operations Progressional
- Terraform Associate Certification

Skills

Ansible experience (developing roles, playbooks, AWX or Ansible Tower)
Experience with DevOps and DevOps tooling (Jira, Git, Jenkins, etc.)
Experience with Phyton and scripting
Go development (especially for Vault plugin development)
HashiCorp Vault Enterprise management (deployment/upgrade in HA, troubleshooting,
monitoring, hardening, integrations)
Jenkins (pipeline development and automation)
Red Hat Linux 7 and 8 system administration (troubleshooting, monitoring, hardening)
Red Hat Linux 9 system administration (troubleshooting, monitoring, hardening)
SELinux (policy development and troubleshooting)
Terraform hands-on experience (module development)