Job Summary

The HashiCorp Vault Engineer will assess, modernize, upgrade, and optimize HCP Vault environments to improve platform stability, scalability, performance, security, and operational efficiency. The role will lead current-state assessments, target-state architecture, upgrade planning and execution, deployment automation, CI/CD modernization, monitoring and observability, operational support, and knowledge transfer. The engineer will collaborate with infrastructure, security, DevOps, and application teams to establish sustainable platform administration and operational best practices.

Key Responsibilities
• Conduct comprehensive assessments of existing HCP Vault environments, including architecture, infrastructure, integrations, security controls, and operational processes.
• Identify technical debt, performance bottlenecks, security risks, and platform lifecycle concerns.
• Develop current-state and target-state architecture documentation.
• Define and document recommended HCP Vault upgrade paths.
• Assess version dependencies, compatibility requirements, and environmental considerations.
• Develop upgrade runbooks, rollback procedures, risk mitigation plans, and implementation schedules.
• Present upgrade and architecture recommendations to technical and business stakeholders.
• Lead HCP Vault platform upgrades across development, test, and production environments.
• Coordinate deployment, validation, testing, and production cutover activities.
• Implement near-zero or zero-downtime deployment methodologies where applicable.
• Troubleshoot and resolve platform and upgrade-related issues.
• Assess existing CI/CD processes and deployment workflows.
• Design and implement improvements to automation pipelines to increase release consistency, reliability, and operational efficiency.
• Integrate automated testing and deployment best practices into CI/CD workflows.
• Enhance platform monitoring, logging, alerting, and observability capabilities.
• Develop operational dashboards and system health monitoring standards.
• Establish proactive monitoring and incident management procedures.
• Define service reliability and operational support metrics.
• Create SOPs for HCP Vault administration and maintenance.
• Develop operational runbooks covering support, monitoring, backup, recovery, and patch management.
• Conduct knowledge transfer sessions and administrator training.
• Support transition of platform operations to internal teams.
• Deliver required project artifacts, including assessment reports, architecture documentation, upgrade roadmaps, runbooks, monitoring frameworks, SOPs, training materials, and project closeout documentation.

Required Qualifications
• 8+ years of experience supporting enterprise infrastructure, platforms, or cloud environments.
• 3+ years of hands-on experience administering and upgrading HCP Vault environments.
• Proven experience planning and executing enterprise platform upgrades.
• Strong understanding of high availability, disaster recovery, and operational resilience.
• Experience designing and implementing CI/CD pipelines and automation.
• Experience with Infrastructure as Code and configuration management tools.
• Strong troubleshooting and root-cause analysis skills.
• Experience working with security and compliance requirements in regulated environments.
• Strong understanding of platform architecture, deployment, monitoring, and operational support.
• Excellent written and verbal communication skills.

Preferred Qualifications
• Experience with HashiCorp Vault Enterprise architectures.
• Experience with Terraform, Ansible, Jenkins, GitHub Actions, Azure DevOps, or similar automation tools.
• Experience implementing zero-downtime upgrade methodologies.
• Experience with AWS, Azure, or GCP cloud platforms.
• Knowledge of secrets management, PKI, identity integration, and encryption best practices.
• Experience developing operational runbooks and governance documentation.
• Experience in financial services, healthcare, or other regulated industries.