Platform Engineer - Hashi Vault IRC298441 Function
Software Product Engineering
Experience
5-10 years
Location
United Kingdom - London
Skills
- CI/CD Tools
- GitHub Actions
- HashiCorp Vault
- Ubuntu
- Version Control GIT/GitHub
- CI/CD Tools GitHub Actions
Overview
This role is all about building robust, scalable, and automated platform foundations. Your day to day may involve infrastructure provisioning, automation pipelines, platform reliability improvements, and building tooling to support wider engineering teams. We're looking for someone who brings core platform engineering expertise, thrives in highly automated environments, and can flex across different aspects of the platform as priorities evolve.
Requirements
- Proven experience as a Platform Engineer, DevOps Engineer, or SRE
- Strong background in Secrets Management using Hashi Vault
- Solid understanding of DevOps principles, CI/CD pipelines, and system automation
- Strong grasp of platform reliability, resilience, and scalability best practices
- Ability to work independently, adapt quickly, and collaborate effectively across engineering teams
- Excellent communication skills for both technical and cross functional stakeholders
Job responsibilities
- Deploy and maintain the lifecycle of HashiCorp Vault clusters across multiple environments (Dev, Stage, Prod)
- Ensure 99.9% uptime through proper configuration of storage backends (Raft or Consul) and unseal workflows (Auto unseal via KMS/Cloud HSM)
- Perform seamless version upgrades and scale the infrastructure to handle increasing request volumes
- Secrets Lifecycle & Governance
- Implement and manage various secret engines, including KV, Dynamic Secrets (AWS, Azure, SQL databases), and PKI for automated certificate issuance
- Write and enforce "Least Privilege" access policies using HCL to ensure users and machines only see what they absolutely need
- Integrate Vault with identity providers such as LDAP, Okta, OIDC, and cloud native IAM roles
- Act as the primary consultant for engineering teams to migrate hardcoded secrets/environment variables into Vault
- Secure CI/CD pipelines (GitHub Actions, GitLab, Jenkins) by injecting secrets at runtime using Vault agents or injectors
- Provide guidance to developers on using Vault APIs and client libraries (e.g., HVAC for Python, Spring Cloud Vault)
- Security, Auditing & Compliance
- Monitor and analyze Vault audit logs to detect anomalous behavior or unauthorized access attempts
- Establish and regularly test backup/restore procedures and replication (Performance vs. DR replication)
- Automate the rotation of long lived credentials to minimize the blast radius of a potential leak
Benefits
- Comprehensive health and wellness plan, private healthcare, and discounted gym memberships
- Competitive pension scheme
- Recognition schemes through bonus/reward initiatives
- Annual volunteering day
- Hybrid working model
Equal Opportunity Statement
We are an equal opportunities employer. It is our policy to promote an environment free from discrimination, harassment and victimisation.