> Markdown version of [/jobs/ext/3332250-platform-engineer-vault-sme-irc298440](https://www.wearedevelopers.com/jobs/ext/3332250-platform-engineer-vault-sme-irc298440). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Platform Engineer - Vault SME IRC298440

- **Company:** Hitachi, Ltd
- **Location:** London, UK (Remote available)
- **Salary:** £57,900.0
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Amazon Web Services, Audit Trail, Microsoft Azure, Cloud Computing, Cloud Engineering, Continuous Integration, Data Centers, DevOps, Disaster Recovery, Github, Identity and Access Management, Python (Programming Language), Key Management, Lightweight Directory Access Protocols (LDAP), OpenID, Public Key Infrastructure, Role-Based Access Control, SQL Databases, Systems Integration, Okta, Spring Cloud, System Availability, Delivery Pipeline, Gitlab, Hashicorp, Enterprise Integration, Jenkins
- **Published:** September 17, 2026
- **Apply:** https://www.adzuna.co.uk/jobs/details/5887451470

## About the Role

Proven experience as a Platform Engineer, DevOps Engineer, or SRE
Strong background in Secrets Management using Hashi Vault
Solid understanding of DevOps principles, CI/CD pipelines, and system automation.
Strong grasp of platform reliability, resilience, and scalability best practices.
Ability to work independently, adapt quickly, and collaborate effectively across engineering teams.
Excellent communication skills for both technical and cross-functional stakeholders.

## Description

You'll play a key hands-on role in a greenfield, fully automated data center deployment, contributing
across the full platform lifecycle-from infrastructure design and automation to system integration and operational enablement.
This role is all about building robust, scalable, and automated platform foundations. Your day-to-day may involve infrastructure provisioning, automation pipelines, platform reliability improvements, and building tooling to support wider engineering teams.
We're looking for someone who brings core platform engineering expertise, thrives in highly automated environments, and can flex across different aspects of the platform as priorities evolve., 1. Architecture & Infrastructure Management

Deploy and Maintain: Manage the lifecycle of HashiCorp Vault clusters across multiple environments (Dev, Stage, Prod).
High Availability: Ensure 99.9% uptime through proper configuration of storage backends (like Raft or Consul) and unseal workflows (Auto-unseal via KMS/Cloud HSM).
Upgrades & Scaling: Perform seamless version upgrades and scale the infrastructure to handle increasing request volumes

 2. Secrets Lifecycle & Governance

Engine Configuration: Implement and manage various secret engines, including KV (Key-Value), Dynamic Secrets (AWS, Azure, SQL databases), and PKI (Public Key Infrastructure) for automated certificate issuance.
Policy Authoring: Write and enforce "Least Privilege" access policies using HCL (HashiCorp Configuration Language) to ensure users and machines only see what they absolutely need.
Auth Method Integration: Integrate Vault with identity providers such as LDAP, Okta, OIDC, and cloud-native IAM roles.

 3. Developer Enablement & Integration

Onboarding: Act as the primary consultant for engineering teams to migrate hardcoded secrets/environment variables into Vault.
Pipeline Integration: Secure CI/CD pipelines (GitHub Actions, GitLab, Jenkins) by injecting secrets at runtime using Vault agents or injectors.
SDK Support: Provide guidance to developers on using Vault APIs and client libraries (e.g., HVAC for Python, Spring Cloud Vault).

 4. Security, Auditing & Compliance

Audit Logging: Monitor and analyze Vault audit logs to detect anomalous behavior or unauthorized access attempts.
Disaster Recovery: Establish and regularly test Backup/Restore procedures and replication (Performance vs. DR replication).
Secret Rotation: Automate the rotation of long-lived credentials to minimize the blast radius of a potential leak.
Department/Project Description