Senior Vault Engineer

DTCC • Coppell, TX

1d • Hybrid

About The Position

The Senior Vault Engineer is a member of the CISO Team and designs, implements, and manages enterprise-scale secrets management and machine identity solutions across on-premises and cloud environments. The role requires expertise in HashiCorp Vault, modern authentication and authorization patterns, automation, and zero-trust security principles. The engineer implements secure secret delivery mechanisms, short-lived credentials, dynamic secrets, and workload identities, and promotes security-first engineering practices across development, operations, and platform teams.

The role supports highly available, scalable, and resilient Vault infrastructure and integrations with CI/CD pipelines, Kubernetes platforms, cloud services, and enterprise identity providers. It also includes automation, troubleshooting, and support for compliance, audit, and security requirements in regulated environments. DTCC describes its work environment as a flexible/hybrid model with three days onsite and two days remote.

Requirements

• Bachelor’s degree and/or equivalent in Cyber Security or a related field.
• At least 6 years of relevant experience.
• 5+ years of experience in security engineering, cloud infrastructure, platform engineering, or DevSecOps.
• Deep understanding of authentication, authorization, identity federation, and access management concepts.
• Strong experience implementing Vault authentication methods, including OIDC, LDAP, Kubernetes, AppRole, JWT, AWS IAM, and certificate-based authentication.
• Hands-on experience deploying and managing Vault secret engines, including KV, PKI, Database, Transit, AWS/Azure Secrets, SSH, and Dynamic Secrets.
• Experience designing solutions using dynamic secrets, leased credentials, and secret rotation frameworks.
• Strong understanding of Zero Trust Architecture, machine identities, workload identities, least privilege, and security-by-design principles.
• Advanced automation and DevOps experience using Python, Terraform, Jenkins, GitLab, Groovy, and REST APIs.
• Experience integrating Vault with Kubernetes, service mesh technologies, and modern platform engineering ecosystems.
• Strong troubleshooting skills across networking, TLS, PKI, cloud infrastructure, authentication systems, and distributed platforms.

Nice To Haves

• Knowledge of PKI, certificate lifecycle management, HSMs, and enterprise key management solutions.
• Experience with AWS, Azure, or multi-cloud environments.
• Experience with monitoring and observability platforms.
• HashiCorp Vault, cloud, Kubernetes, or security-related certifications.
• Experience working in highly regulated industries such as financial services.
• Experience with SPIFFE/SPIRE, workload identity, or service-to-service authentication frameworks.

Responsibilities

• Design, deploy, and maintain HashiCorp Vault infrastructure across on-premises and cloud platforms such as AWS or equivalent.
• Implement and manage secure secret management solutions for high availability, scalability, and resilience.
• Configure and support Vault authentication methods and secret engines.
• Integrate Vault with CI/CD pipelines, Kubernetes platforms, cloud services, and enterprise identity providers.
• Automate secret provisioning, rotation, access control, and certificate lifecycle management using Infrastructure-as-Code and scripting.
• Promote Zero Trust principles, least-privilege access, and short-lived or ephemeral credentials to eliminate hardcoded secrets.
• Develop automation and integrations.
• Troubleshoot and resolve issues involving Vault, authentication workflows, PKI, networking, and cloud integrations.
• Support compliance, audit, and security requirements in regulated environments.

Benefits

• Competitive compensation, including base pay and annual incentive.
• Comprehensive health and life insurance and well-being benefits, based on location.
• Pension / Retirement benefits.
• Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support physical, financial, and emotional well-being.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior