HashiCorp Secrets Management

Key Responsibilities

• Implement and manage HashiCorp Vault for centralized secrets management.
• Configure KV, Dynamic Secrets, PKI, Transit Secrets Engine, and other Vault secret engines.
• Manage authentication methods such as LDAP, Active Directory, AppRole, Kubernetes, AWS IAM, and JWT/OIDC.
• Configure and maintain Vault policies, ACLs, namespaces, tokens, and access controls.
• Implement dynamic credentials for databases, cloud platforms, and applications.
• Integrate Vault with Kubernetes, CI/CD pipelines, DevOps tools, and enterprise applications.
• Configure Vault HA, replication, disaster recovery, backup, and recovery.
• Monitor Vault health, performance, audit logs, and security events.
• Troubleshoot authentication, authorization, connectivity, and secrets-access issues.
• Automate Vault configuration using Terraform, Ansible, or scripting.
• Support certificate and PKI lifecycle management.
• Ensure secrets management practices comply with enterprise security standards.
• Participate in upgrades, migrations, and production deployments.
• Prepare technical documentation and operational procedures.

Mandatory Skills

• HashiCorp Vault / Secrets Management
• Vault Authentication & Authorization
• Vault Policies / ACL
• KV & Dynamic Secrets
• PKI Secrets Engine
• AppRole / LDAP / AD / Kubernetes authentication
• Vault HA & Disaster Recovery
• Terraform
• Linux
• REST API / CLI
• Basic scripting Python / Shell