Key Skills

Job Description

Description: Seeking an IAM Security Engineer with strong expertise in securing and managing enterprise environments. The ideal candidate will have hands-on experience with HashiCorp Vault, Terraform, RHEL, and Ansible, and will be expected to maintain, support and enhance the on-premises Swift Secrets Management Service (SSMS) that is based upon HashiCorp Vault Enterprise Edition (Vault), tools, processes, and technologies including but not limited to: Develop, test and perform OS and software upgrades, prepare for and perform business continuity activities and address vulnerabilities for our HashiCorp Vault Enterprise infrastructures. Interact with the vendor and Swift internal teams to ensure availability of, maintenance, enhancements to, and integration with all the Swift ecosystems (MS-AD, monitoring, backup, SIEM, …) of SSMS/Vault infrastructure. Investigate and resolve issues that impact or could potentially impact the availability of SSMS and its Vault infrastructure. Troubleshoot and monitor performance and security of HashiCorp Vault. Assist application team(s) with onboarding digital secrets to the Secret Management, including reviewing the environment for authentication methods, secrets engines to onboard secrets, assisting in developing compliance reporting, policy review/enforcement, and end-to-end lifecycle management activities. Work with the team to expand services and visibility by continuing to review the offering, speaking with stakeholders and assisting new application teams to adopt and automate. Develop and maintain automation workflows using Ansible. Develop and maintain Terraform modules for secure infrastructure provisioning. Enhance and provide regular reporting and accountability on key metrics and agreed-upon deliverables and ensure that the team is performing according to them. Maintain a customer guide that can be reused by the application team(s) for future onboarding actions. Maintain a runbook for the Secret Management service infrastructure and work with the administrators to maintain and enhance the administrators' guide. On-call on a rotational basis. On-site presence for at least 2 days a week (hybrid mode). Skills and Required Experience: Ansible experience (developing roles, playbooks, AWX or Ansible Tower): 2 years. Experience with DevOps and DevOps tooling (Jira, Git, Jenkins, etc.): 3 years. Experience with Python and scripting: 2 years. Experience with Python and scripting: 3 years. Go development (especially for Vault plugin): 1 year. HashiCorp Vault (Open Source) management (deployment/upgrade in HA, troubleshooting, monitoring, hardening, integrations): 3 years. HashiCorp Vault Enterprise management (deployment/upgrade in HA, troubleshooting, monitoring, hardening, integrations): 1 year. Red Hat Linux 7 and 8 system administration (troubleshooting, monitoring, hardening): 3 years. Red Hat Linux 9 system administration (troubleshooting, monitoring, hardening): 1 year. SELinux (policy development and troubleshooting): 2 years. Terraform hands-on experience (module development): 2 years.

Core Responsibilities

Maintain, secure, upgrade, and troubleshoot the on-premises Swift Secrets Management Service and its HashiCorp Vault infrastructure, including integrations, business continuity, and vulnerability remediation. Support application teams with secrets onboarding and lifecycle management, develop automation and Terraform modules, maintain service documentation, and report on delivery metrics.

Requirements

The role requires hands-on experience with HashiCorp Vault, including Vault Enterprise, Red Hat Linux, Terraform, Ansible, Python scripting, Go development, and SELinux. The posting specifies experience requirements ranging from 1 to 3 years across these technologies, along with DevOps tooling experience.