Senior DevSecOps – Secrets Engineer
C.H. Robinson
full-time
Posted on:
Location Type: Remote
Location: Remote • Illinois, Minnesota • 🇺🇸 United States
Visit company websiteSalary
💰 $93,400 - $210,000 per year
Job Level
Senior
Tech Stack
AnsibleAzureCloudCyber SecurityKubernetesTerraformVault
About the role
- Lead and execute in the full lifecycle of engineering, delivering, and operating HashiCorp(an IBM Company) Vault solutions.
- Implement and manage Vault services, access policies, and secret engines tailored to team and project needs.
- Design and build new authentication methods to enhance security and efficiency.
- Delivery of the Cloud based secrets and key management technologies, policies, automation, integration, software and systems patching.
- Lead projects and expand coverage to new use cases and achieve cost efficiencies for Vault usage through standardization.
- Monitors and responds to capacity and performance needs of the secrets infrastructure.
- Provide regular reporting/metrics to leadership regarding secrets/vault capacity, usage, and licensing.
- Ensure Vault instances operate with high availability across multiple regions.
- Collaborate with cross-functional teams to ensure seamless solution delivery and operational support.
- Utilize Agile methodologies for project management and workflow processing using Azure Boards.
- Lead projects to develop new security features, manage cloud-based secrets, and ensure efficient and standardized technology use.
- Conduct proof of concepts to validate secrets management solutions.
- Integrate Vault with various technologies (e.g.Kubernetes).
- Hands-on experience with Kubernetes deployments.
- Maintain comprehensive documentation and manage the capacity and performance of the secrets infrastructure.
- On-call support rotation to address critical incidents.
- Exposure to AI/LLM to automate mundane tasks to improve operational excellence and developer experience.
Requirements
- 5+ experience with HashiCorp Vault, including implementation and management.
- 3+ experience with IaC – Infrastructure as a Code (Terraform, Ansible).
- Good understanding of Kubernetes and containerization environments and its authentication mechanisms.
- Knowledge of other secret management solutions (e.g., Infisical,Akeyless, Delinea) is a plus.
- Knowledge in Identity & Access Management and relevant technologies.
- Strong understanding of cloud services, SaaS, and cybersecurity principles.
- Excellent problem-solving skills, with the ability to work collaboratively in a team environment.
- Proactive, accountable, autonomous, and solutions oriented
- Growth mindset to learn and take on new challenges
- Bachelor’s degree or equivalent work experience and a high school diploma/GED
Benefits
- Three medical plans which include Prescription drug coverage
- Enhanced Fertility benefits
- Flexible Spending Accounts
- Health Savings Account (including employer contribution)
- Dental and Vision
- Basic and Supplemental Life Insurance
- Short-Term and Long-Term Disability
- Paid observed holidays
- 2 paid floating holidays for U.S. hourly employees
- Flexible Time Off (FTO) offered to U.S. salaried employees — no accruals and no caps.
- Paid Time Off (PTO) offered to all other employees in the U.S. and Canada
- Paid parental leave
- Paid time off to volunteer in your community
- Charitable Giving Match Program
- 401(k) with 6% company matching
- Employee Stock Purchase Plan
- Plus a broad range of career development, networking, and team-building opportunities
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
HashiCorp VaultInfrastructure as CodeTerraformAnsibleKubernetescloud servicescybersecurity principlessecret management solutionsauthentication methodsautomation
Soft skills
problem-solvingcollaborativeproactiveaccountableautonomoussolutions orientedgrowth mindset
Certifications
Bachelor’s degreehigh school diploma/GED