
Principal Cybersecurity – HashiCorp Vault Platform
AT&T
full-time
Posted on:
Location Type: Office
Location: Charlotte • North Carolina • United States
Visit company websiteExplore more
Salary
💰 $155,400 - $233,200 per year
Job Level
About the role
- Design, build, and operate a large‑scale, production HashiCorp Vault platform providing centralized secrets management across the organization
- Implement and support high‑availability (HA) Vault clusters, ensuring reliability and uptime
- Partner with security, platform, and application teams to integrate Vault with applications, CI/CD pipelines, and cloud/Kubernetes environments
- Own the implementation and lifecycle of Vault authentication methods, secrets engines, and access policies
- Automate Vault deployment, configuration, and operational workflows using Infrastructure as Code and scripting
- Monitor Vault health, performance, and security using telemetry, audit logs, and observability tooling
- Participate in on‑call rotations, incident response, troubleshooting, and post‑incident reviews
- Ensure Vault configurations align with enterprise security standards and regulatory requirements
Requirements
- Hands‑on experience operating HashiCorp Vault in production, including initialization, sealing/unsealing, and day‑2 operations
- Strong knowledge of Vault authentication methods (OIDC, LDAP, Kubernetes, cloud IAM) and secrets engines (KV, Transit, PKI, database, Kubernetes)
- Experience running high‑availability and disaster‑tolerant Vault environments
- Proficiency with Infrastructure as Code, especially Terraform, for managing Vault and supporting infrastructure
- Strong automation and scripting skills (Python, Go, Bash/Shell)
- Experience integrating Vault with Kubernetes and cloud platforms (commonly AWS)
- Familiarity with observability and monitoring tools (e.g., Datadog, Prometheus, Grafana)
- Solid foundation in security engineering, including encryption, PKI, identity, and access control
- 7+ years of experience in DevOps, SRE, Infrastructure, or Security Engineering roles
- Vault Associate certification or equivalent hands‑on experience (advanced Vault operations experience preferred)
- Familiarity with applying Artificial Intelligence (AI) or Machine Learning (ML) techniques in cybersecurity contexts (e.g., anomaly detection, threat hunting, behavioral analytics, or risk scoring).
Benefits
- Medical/Dental/Vision coverage
- 401(k) plan
- Tuition reimbursement program
- Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays)
- Paid Parental Leave
- Paid Caregiver Leave
- Additional sick leave beyond what state and local law require may be available but is unprotected
- Adoption Reimbursement
- Disability Benefits (short term and long term)
- Life and Accidental Death Insurance
- Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
- Employee Assistance Programs (EAP)
- Extensive employee wellness programs
- Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T phone.
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
HashiCorp Vaulthigh-availability (HA) environmentsVault authentication methodssecrets enginesInfrastructure as CodeTerraformautomationscriptingPythonGo
Soft Skills
incident responsetroubleshootingpost-incident reviewscollaboration
Certifications
Vault Associate certification