Senior Hashicorp Engineer

***We are unable to sponsor for this permanent full-time role***

***Position is bonus eligible***

Prestigious Financial Company is currently seeking a Senior Hashicorp Engineer with strong DevOps and preferably some CyberArk experience as well. Candidate will provide 24x7 operational support for the suite of privileged management solutions (e.g., CyberArk, Hashi, PKI), including implementing hot fixes, resolving bugs, troubleshooting issues, performing break-fixes, managing secrets lifecycle, and delivering end-user support.

Responsibilities:

Maintain robust operational integrity of privileged access management infrastructure throughout its lifecycle (e.g., patching, version control, system upgrades, alignment with Security standards, etc.). Provide organizational subject matter expert on secrets management and privileged access management architecture, establishing and enforcing security as code principles throughout the environment.

Develop and implement system enhancements to improve platform user experience and automated integrations, while designing long-term solutions to address operational issues through innovative technologies including artificial intelligence for faster detection and remediation of functional and technical problems.

Qualifications:

Knowledge of application authentication and authorization systems (i.e., Active Directory, oAuth 2.0, OIDC, AWS IAM, App Role, k8s, LDAPS, Kerberos, Certificate)

Working knowledge of the cloud ecosystem and CI/CD deployments with Terraform, Ansible, and Jenkins pipelines.

Working knowledge of security architecture design and principles including confidentiality, integrity and availability.

Experience in one or more of the following disciplines: security operations, development, engineering, or architecture

Experience supporting privileged access management and access controls programs.

Professional or personal experience using AI coding agents such as OpenAI Codex, Claude Code, or Gemini CLI.

Technical Skills:

Expertise in providing operational and engineering support for one or more of the following: CyberArk, HashiCorp Vault, Active Directory Certificate Services (ADCS), HSMs, and Public Key Infrastructure (PKI).

Expertise in scripting languages and developing in one or more of the following languages GoLang, Bash, Python, PowerShell, Ansible, and/or Terraform.

Knowledge of privileged access management methodologies and techniques for on-prem and Cloud implementation.