Lead Identity Engineer

About the Role: We are seeking a highly skilled and motivated HashiCorp Developer to join our dynamic Privileged Access Management team. The ideal candidate will possess deep expertise in the implementation, administration, and ongoing support of HashiCorp Vault in enterprise-grade environments. This role involves integration with both on-premises and cloud-native applications, driving automation, ensuring scalability, and delivering secure and efficient secrets management solutions.What You’ll Do: Vault Implementation & Administration: Architect, implement, and maintain HashiCorp Vault clusters in both development and production environments. Design and manage secrets lifecycle, access policies, token/lease management, and key rotation. Monitor and tune performance, availability, and security of Vault services. Integration Expertise: Seamlessly integrate HashiCorp Vault with various applications and platforms including: On-premise applications Cloud-native services (AWS, Azure, GCP) Languages and frameworks such as PowerShell, Python, Java, and RESTful APIs. Develop plugins and connectors where necessary to support unique application requirements. Automation and Infrastructure as Code (IaC): Drive operational efficiency and scalability using Terraform and AWS Lambda for secrets automation and lifecycle management. Automate Vault provisioning, configuration, and secret injection using CI/CD pipelines. Develop and maintain reusable Infrastructure as Code templates and modules. Scripting and Development: Design robust scripting solutions using PowerShell, Python, and other relevant scripting languages. Automate secrets rotation, onboarding, and offboarding processes. Build integrations and custom tooling for DevOps pipelines and secrets orchestration. Operational Support: Actively participate in on-call rotations and provide weekend support during production deployments or critical issue resolution. Troubleshoot and resolve Vault access issues, integration failures, and performance bottlenecks. Document architecture, processes, and best practices.What You Bring: Minimum 5 years of hands-on experience with HashiCorp Vault in an enterprise environment. Strong expertise in secure secrets management, policy enforcement, and access control. Proficiency in PowerShell, Python, Bash, or other scripting languages. Demonstrated experience with Terraform, AWS Lambda, and DevOps automation practices. Knowledge of system security and compliance principles (e.g., secrets rotation, audit logging). Experience with cloud platforms like AWS, Azure, or GCP. Understanding of DevOps CI/CD pipelines and integration with Vault for dynamic secrets management.Nice to have Experience with CyberArk or Beyond Trust PAM solutions. Familiarity with Kubernetes and Vault Agent Injector. Understanding of enterprise identity providers (LDAP, Azure AD, Okta) and their integration with Vault. Exposure to containerization and microservices security. HashiCorp Vault Associate Certification AWS Certified Solutions Architect or DevOps EngineerAbout Simeio and What We DoSimeio has over 650 talented employees across the globe. We have offices in USA (Atlanta HQ and Texas), India, Canada, Costa Rica and UK.Founded in 2007, and now backed by private equity company ZMC, Simeio is recognized as a top IAM provider by industry analysts. Alongside Simeio’s identity orchestration tool ‘Simeio IO’ - Simeio also partners with industry leading IAM software vendors to provide access management, identity governance and administration, privileged access management and risk intelligence services across on-premise, cloud, and hybrid technology environments. Simeio provides services to numerous Fortune 1000 companies across all industries including financial services, technology, healthcare, media, retail, public sector, utilities and education.Diversity & InclusionSimeio is an equal opportunity employer. If you require assistance with completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to our recruitment team - recruitment@simeio.com. Thank youAbout Your ApplicationWe carefully review every application we receive. If your skills and experience match our needs, we’ll be in touch. If you don’t hear from us within 10 days, please don’t be discouraged—we may retain your application for future opportunities. We also encourage you to check our careers page for other openings