Senior DevSecOps - Secrets Engineer

C.H. Robinson•Eden Prairie, IL

21h

About The Position

C.H Robinson is seeking a skilled DevSecOps – Secrets Engineer to lead the charge in securing our digital assets through expert management of HashiCorp Vault. In this pivotal role, you'll be at the heart of our DevSecOps efforts, engineering, delivering, and operating sophisticated Vault/Secrets solutions. As a DevSecOps Secret Engineer your responsibilities will span the full lifecycle of secrets management, from implementing cutting-edge Vault services and designing robust access policies to ensuring our secrets infrastructure scales seamlessly across the Software Development Lifecyle. You will be collaboration with engineering teams, designing, and implementing authentication methods, and ensuring high availability of Vault instances. C.H. Robinson solves logistics problems for companies across the globe and across industries, from the simple to the most complex. With $28 billion in freight under management and 2.5X larger than the next largest North American freight broker, we are one of the world’s largest logistics platforms with our 100,00 customers and 85,000 contract carriers. Our global suite of services accelerates trade to seamlessly deliver the products and goods that drive the world’s economy. Our technology is built by and for supply chain experts to bring faster, more meaningful improvements to our customers’ businesses.

Requirements

5+ experience with HashiCorp Vault, including implementation and management.
3+ experience with IaC – Infrastructure as a Code (Terraform, Ansible ).
Good understanding of Kubernetes and containerization environments and its authentication mechanisms.
Knowledge in Identity & Access Management and relevant technologies.
Strong understanding of cloud services, SaaS, and cybersecurity principles.
Excellent problem-solving skills, with the ability to work collaboratively in a team environment.
Proactive, accountable, autonomous, and solutions oriented
Growth mindset to learn and take on new challenges
Bachelor’s degree or equivalent work experience and a high school diploma/GED

Nice To Haves

Knowledge of other secret management solutions (e.g., Infisical,Akeyless, Delinea) is a plus.
Experience with C#, JavaScript and Node.js development is a plus
Certification: HashiCorp Vault, Azure Certification is a plus.
Strong time management and organizational skills
Ability to deliver to aggressive deadlines while working complex projects across multiple groups
Strong facilitation and communication skills, ability to coordinate and motivate resources
Values a diverse and inclusive work environment

Responsibilities

Lead and execute in the full lifecycle of engineering, delivering, and operating HashiCorp(an IBM Company) Vault solutions.
Implement and manage Vault services, access policies, and secret engines tailored to team and project needs.
Design and build new authentication methods to enhance security and efficiency.
Delivery of the Cloud based secrets and key management technologies, policies, automation, integration, software and systems patching
Lead projects and expand coverage to new use cases and achieve cost efficiencies for Vault usage through standardization.
Monitors and responds to capacity and performance needs of the secrets infrastructure.
Provide regular reporting/metrics to leadership regarding secrets/vault capacity, usage, and licensing.
Ensure Vault instances operate with high availability across multiple regions.
Collaborate with cross-functional teams to ensure seamless solution delivery and operational support.
Utilize Agile methodologies for project management and workflow processing using Azure Boards.
Lead projects to develop new security features, manage cloud-based secrets, and ensure efficient and standardized technology use.
Conduct proof of concepts to validate secrets management solutions.
Integrate Vault with various technologies (e.g.Kubernetes).
Hands-on experience with Kubernetes deployments
Maintain comprehensive documentation and manage the capacity and performance of the secrets infrastructure.
On-call support rotation to address critical incidents
Exposure to AI/LLM to automate mundane tasks to improve operational excellence and developer experience

Benefits

Three medical plans which include Prescription drug coverage
Enhanced Fertility benefits
Flexible Spending Accounts
Health Savings Account (including employer contribution)
Dental and Vision
Basic and Supplemental Life Insurance
Short-Term and Long-Term Disability
Paid observed holidays
2 paid floating holidays for U.S. hourly employees
Flexible Time Off (FTO) offered to U.S. salaried employees — no accruals and no caps.
Paid Time Off (PTO) offered to all other employees in the U.S. and Canada
Paid parental leave
Paid time off to volunteer in your community
Charitable Giving Match Program
401(k) with 6% company matching
Employee Stock Purchase Plan
Plus a broad range of career development, networking, and team-building opportunities