Senior Vault Engineer

This is a fully remote position, open to applicants in New Jersey.

📋 Description

• Transition Synopsys from team-specific namespaces to a self-service, pattern-based Vault onboarding framework.

• Collaborate with the Synopsys Vault team as a contractor and develop within its ecosystem.

• Engage with the Vault team, stakeholders, and application teams to evaluate existing onboarding procedures.

• Gather data on onboarding candidates while identifying client personas and appropriate authentication methods.

• Establish the target namespace strategy and team-level ACL isolation framework.

• Choose two or three high-impact consumption patterns to focus on.

• Create the onboarding request format and approval process.

• Develop Terraform modules for onboarding patterns involving GitHub Actions, Azure DevOps, and Kubernetes.

• Set up a centralized onboarding repository in Azure DevOps, complete with documentation and request templates.

• Link approval workflows to Terraform pipelines for automated provisioning.

• Generate welcome instructions that include login URLs, Okta groups, secret paths, seeded secrets, pipeline snippets, and documentation links.

• Test the model with selected teams, collect feedback, and make necessary adjustments.

• Enhance onboarding with additional documentation and progressively shift to fully self-service pull requests.

• Direct new teams towards the shared-namespace model and strategize migration for existing teams.

• Define a path for advanced teams that require dedicated namespaces.

• Position Vault as the primary secrets manager through internal documentation, outreach efforts, and a community channel.

⛳️ Requirements

• Proven experience as an IBM HashiCorp Resident Architect (RSA).

• Strong expertise with HashiCorp Vault and its adoption frameworks.

• Background in designing namespace strategies and implementing ACL policy isolation.

• Proficiency in Terraform modules, templating, and pipeline creation.

• Experience with JWT/OIDC, service account, and Okta authentication methods.

• Familiarity with GitHub Actions, Azure DevOps, and Kubernetes integrations.

• Capability to gather onboarding requirements, including application ID, platform, runtime, language, and deployment environment.

• Skill in designing and executing self-service onboarding automation.

• Ability to document onboarding processes, secret paths, pipeline snippets, and support frameworks.

• Competence in collaborating with Vault teams, stakeholders, and application teams.

🏝️ Benefits

• Short-term engagement lasting approximately 3 months, on a part-time basis.

• Contractor role.

• Opportunity to collaborate closely with the Vault team within the client's environment.