> Markdown version of [/jobs/ext/3893524-senior-vault-engineer](https://www.wearedevelopers.com/jobs/ext/3893524-senior-vault-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Vault Engineer

- **Company:** The Depository Trust & Clearing Corporation
- **Location:** Coppell, TX, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, User Authentication, Microsoft Azure, Cloud Computing, Cyber Security, Databases, DevOps, Federated Identity Management, Groovy, Monitoring of Systems, Identity and Access Management, Python (Programming Language), Key Management, Lightweight Directory Access Protocols (LDAP), OpenID, Public Key Infrastructure, Role-Based Access Control, Cloud Services, Zero Trust Network Access, Scripting, Transport Layer Security, Istio, System Availability, Multi-Cloud, Gitlab, Kubernetes, Hashicorp, Cloud Integration, Restful APIs, Terraform, Devsecops, Jenkins
- **Published:** October 23, 2026
- **Apply:** https://ebxr.fa.us2.oraclecloud.com/hcmUI/CandidateExperience/en/sites/CX_1/requisitions/preview/215011

## About the Role

* Bachelor†s degree and/or equivalent in Cyber Security or related field
 * Min 6 years of relevant experienc

Talents Needed for Success:

 * 5+ years of experience in security engineering, cloud infrastructure, platform engineering, or DevSecOps.
 * Deep understanding of authentication, authorization, identity federation, and access management concepts.
 * Strong experience implementing Vault authentication methods including OIDC, LDAP, Kubernetes, AppRole, JWT, AWS IAM, and certificate-based authentication.
 * Hands-on experience deploying and managing Vault secret engines including KV, PKI, Database, Transit, AWS/Azure Secrets, SSH, and Dynamic Secrets.
 * Experience designing solutions using dynamic secrets, leased credentials, and secret rotation frameworks.
 * Strong understanding of Zero Trust Architecture, machine identities, workload identities, least privilege, and security-by-design principles.
 * Advanced automation and DevOps experience using Python, Terraform, Jenkins, GitLab, Groovy, and REST APIs.
 * Experience integrating Vault with Kubernetes, service mesh technologies, and modern platform engineering ecosystems.
 * Strong troubleshooting skills across networking, TLS, PKI, cloud infrastructure, authentication systems, and distributed platforms., * Knowledge of PKI, certificate lifecycle management, HSMs, and enterprise key management solutions.
 * Experience with AWS, Azure, or multi-cloud environments.
 * Experience with monitoring and observability platforms.
 * HashiCorp Vault, cloud, Kubernetes, or security-related certifications.
 * Experience working in highly regulated industries such as financial services.
 * Experience with SPIFFE/SPIRE, workload identity, or service-to-service authentication frameworks.

## Description

Being a member of CISO Team, this role is for a Senior Vault Engineer to design, implement, and manage enterprise-scale secrets management and machine identity solutions across on-premises and cloud environments. This role requires deep expertise in HashiCorp Vault, modern authentication and authorization patterns, automation, and zero-trust security principles. The ideal candidate will have experience implementing secure secret delivery mechanisms, short-lived credentials, dynamic secrets, and workload identities while driving adoption of security-first engineering practices across development, operations, and platform teams.

Your Primary Responsibilities:

 * Design, deploy, and maintain HashiCorp Vault infrastructure across on-premises and cloud platforms (AWS or equivalent).
 * Implement and manage secure secret management solutions ensuring high availability, scalability, and resilience.
 * Configure and support Vault authentication methods and Vault secret engines.
 * Integrate Vault with CI/CD pipelines, Kubernetes platforms, cloud services, and enterprise identity providers.
 * Automate secret provisioning, rotation, access control, and certificate lifecycle management using Infrastructure-as-Code and scripting.
 * Drive adoption of Zero Trust principles, least-privilege access, and short-lived/ephemeral credentials to eliminate hardcoded secrets.
 * Develop automation and integrations.
 * Troubleshoot and resolve issues related to Vault, authentication workflows, PKI, networking, and cloud integrations.
 * Support compliance, audit, and security requirements within regulated environments.