Senior DevSecOps – Secrets Engineer

Posted 125ds ago

Employment Information

Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

DevSecOps Secrets Engineer at C.H. Robinson leading HashiCorp Vault solutions. Ensuring high availability and security for secrets infrastructure while collaborating with engineering teams.

Responsibilities:

  • Lead and execute in the full lifecycle of engineering, delivering, and operating HashiCorp(an IBM Company) Vault solutions.
  • Implement and manage Vault services, access policies, and secret engines tailored to team and project needs.
  • Design and build new authentication methods to enhance security and efficiency.
  • Delivery of the Cloud based secrets and key management technologies, policies, automation, integration, software and systems patching.
  • Lead projects and expand coverage to new use cases and achieve cost efficiencies for Vault usage through standardization.
  • Monitors and responds to capacity and performance needs of the secrets infrastructure.
  • Provide regular reporting/metrics to leadership regarding secrets/vault capacity, usage, and licensing.
  • Ensure Vault instances operate with high availability across multiple regions.
  • Collaborate with cross-functional teams to ensure seamless solution delivery and operational support.
  • Utilize Agile methodologies for project management and workflow processing using Azure Boards.
  • Lead projects to develop new security features, manage cloud-based secrets, and ensure efficient and standardized technology use.
  • Conduct proof of concepts to validate secrets management solutions.
  • Integrate Vault with various technologies (e.g.Kubernetes).
  • Hands-on experience with Kubernetes deployments.
  • Maintain comprehensive documentation and manage the capacity and performance of the secrets infrastructure.
  • On-call support rotation to address critical incidents.
  • Exposure to AI/LLM to automate mundane tasks to improve operational excellence and developer experience.

Requirements:

  • 5+ experience with HashiCorp Vault, including implementation and management.
  • 3+ experience with IaC – Infrastructure as a Code (Terraform, Ansible).
  • Good understanding of Kubernetes and containerization environments and its authentication mechanisms.
  • Knowledge of other secret management solutions (e.g., Infisical,Akeyless, Delinea) is a plus.
  • Knowledge in Identity & Access Management and relevant technologies.
  • Strong understanding of cloud services, SaaS, and cybersecurity principles.
  • Excellent problem-solving skills, with the ability to work collaboratively in a team environment.
  • Proactive, accountable, autonomous, and solutions oriented
  • Growth mindset to learn and take on new challenges
  • Bachelor’s degree or equivalent work experience and a high school diploma/GED

Benefits:

  • Three medical plans which include Prescription drug coverage
  • Enhanced Fertility benefits
  • Flexible Spending Accounts
  • Health Savings Account (including employer contribution)
  • Dental and Vision
  • Basic and Supplemental Life Insurance
  • Short-Term and Long-Term Disability
  • Paid observed holidays
  • 2 paid floating holidays for U.S. hourly employees
  • Flexible Time Off (FTO) offered to U.S. salaried employees — no accruals and no caps.
  • Paid Time Off (PTO) offered to all other employees in the U.S. and Canada
  • Paid parental leave
  • Paid time off to volunteer in your community
  • Charitable Giving Match Program
  • 401(k) with 6% company matching
  • Employee Stock Purchase Plan
  • Plus a broad range of career development, networking, and team-building opportunities