Senior Vault Engineer

DTCC • Coppell, TX

2d • $75,000 - $150,000 • Hybrid

About The Position

As a member of the CISO Team, the Senior Vault Engineer designs, implements, and manages enterprise-scale secrets management and machine identity solutions across on-premises and cloud environments. The role requires expertise in HashiCorp Vault, modern authentication and authorization patterns, automation, and zero-trust security principles. The engineer implements secure secret delivery, short-lived credentials, dynamic secrets, and workload identities, and promotes security-first engineering practices across development, operations, and platform teams.

The position is part of DTCC’s Information Technology group, which delivers secure, reliable technology solutions for the global capital markets. The role uses DTCC’s flexible/hybrid model of three days onsite and two days remote; the onsite days include Tuesday and Wednesday, plus a third day determined by the team or employee.

Requirements

• Bachelor’s degree and/or equivalent in Cyber Security or a related field.
• At least 6 years of relevant experience.
• 5+ years of experience in security engineering, cloud infrastructure, platform engineering, or DevSecOps.
• Deep understanding of authentication, authorization, identity federation, and access management.
• Experience implementing Vault authentication methods including OIDC, LDAP, Kubernetes, AppRole, JWT, AWS IAM, and certificate-based authentication.
• Hands-on experience deploying and managing Vault secret engines, including KV, PKI, Database, Transit, AWS/Azure Secrets, SSH, and Dynamic Secrets.
• Experience designing solutions using dynamic secrets, leased credentials, and secret rotation frameworks.
• Strong understanding of Zero Trust Architecture, machine identities, workload identities, least privilege, and security-by-design principles.
• Advanced automation and DevOps experience using Python, Terraform, Jenkins, GitLab, Groovy, and REST APIs.
• Experience integrating Vault with Kubernetes, service mesh technologies, and modern platform engineering ecosystems.
• Strong troubleshooting skills across networking, TLS, PKI, cloud infrastructure, authentication systems, and distributed platforms.

Nice To Haves

• Knowledge of PKI, certificate lifecycle management, HSMs, and enterprise key management solutions.
• Experience with AWS, Azure, or multi-cloud environments.
• Experience with monitoring and observability platforms.
• HashiCorp Vault, cloud, Kubernetes, or security-related certifications.
• Experience working in highly regulated industries such as financial services.
• Experience with SPIFFE/SPIRE, workload identity, or service-to-service authentication frameworks.

Responsibilities

• Design, deploy, and maintain HashiCorp Vault infrastructure across on-premises and cloud platforms, such as AWS.
• Implement and manage secure secret management solutions for high availability, scalability, and resilience.
• Configure and support Vault authentication methods and secret engines.
• Integrate Vault with CI/CD pipelines, Kubernetes platforms, cloud services, and enterprise identity providers.
• Automate secret provisioning, rotation, access control, and certificate lifecycle management using Infrastructure-as-Code and scripting.
• Promote Zero Trust principles, least-privilege access, and short-lived or ephemeral credentials to eliminate hardcoded secrets.
• Develop automation and integrations.
• Troubleshoot and resolve issues involving Vault, authentication workflows, PKI, networking, and cloud integrations.
• Support compliance, audit, and security requirements in regulated environments.

Benefits

• Competitive compensation, including base pay and annual incentive.
• Comprehensive health and life insurance and well-being benefits, based on location.
• Pension / Retirement benefits.
• Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support physical, financial, and emotional well-being.
• Flexible/hybrid model of three days onsite and two days remote.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior