HashiCorp Vault (Enterprise Edition) / IAM Security Engineer

Experis is hiring an IAM Security Engineer to support the deployment, hardening, and automation of HashiCorp Vault (Enterprise Edition) in an enterprise environment. This hybrid role is based in Culpeper, VA and centers on building reliable secret management capabilities, integrating Vault into existing company ecosystems, and maintaining operational readiness through upgrades and troubleshooting. The position includes rotational on-call support.

In this role, you will help deliver secure, highly available configurations for Vault and related infrastructure, streamline onboarding for digital secrets, and work closely with vendor teams and internal stakeholders to improve service visibility and compliance alignment.

Responsibilities

• Develop, test, and perform OS and software upgrades, prepare for business continuity activities, address vulnerabilities, and support maintenance work.
• Coordinate with vendor and internal teams to ensure SSMS/Vault infrastructure availability, maintenance, enhancements, and integration with enterprise ecosystems including MS-AD, monitoring, backup, and SIEM.
• Investigate and resolve issues that impact or could impact availability of SSMS and its Vault infrastructure.
• Collaborate to expand services and visibility by reviewing offerings, speaking with stakeholders, and helping new application teams adopt and automate.
• Support application teams with onboarding digital secrets, including reviewing environments for authentication methods, selecting secrets engines for onboarding, assisting with compliance reporting, policy review and enforcement, and end-to-end lifecycle management.
• Work with vendors’ delivery teams by maintaining detailed design documentation, gathering prerequisites, and deploying selected solutions or features in highly available, resilient, and secure configurations.
• Ensure integration of the solution with company ecosystems including MS-AD, monitoring, backup, and SIEM.
• Enhance and provide regular reporting and accountability on key metrics and agreed deliverables, ensuring team performance against those targets.
• Maintain a reusable customer guide to support future onboarding actions for application teams.
• Maintain a runbook for the Secret Management service infrastructure and support administrators by maintaining and enhancing the administrators guide.
• Provide rotational on-call support.

Requirements

• HashiCorp Vault Enterprise administration experience including deployment in HA, troubleshooting, monitoring, hardening, and integrations.
• Terraform hands-on experience, including module development.
• Red Hat Linux experience, including RHEL 8.x (troubleshooting, monitoring, hardening).
• RHEL 9 system administration experience.
• Ansible experience, including developing roles and playbooks, and familiarity with AWX or Ansible Tower.
• Python & scripting experience.

Technologies

• HashiCorp Vault Enterprise Edition
• Terraform
• RHEL 8.x
• RHEL 9
• Ansible
• AWX
• Ansible Tower
• Python

Preferred skills

• Go development, especially for Vault plugin development.
• Jenkins pipeline development and automation.
• Splunk (query creation, dashboards, and alerting).
• ELK Stack (integration, queries, alerts, dashboards).
• SELinux (policy development and troubleshooting).

Certifications (nice to have)

• HashiCorp Certified: Vault Associate
• Hashicorp Vault Operations Professional
• Terraform Associate Certification

Qualifications

• 5+ years of experience in security management and automation.
• 3+ years of experience with HashiCorp Vault Enterprise edition.

Location: Culpeper, VA (hybrid). Compensation: USD 71 - 76 per hour. Minimum experience: 3 years.