Designs, deploys, and manages HashiCorp Vault clusters for secure secret management in on-premises and cloud (AWS/GCP) hybrid environments with Kubernetes integration. Requires 3+ years experience, zero trust principles, IaC tools like Terraform, and automation scripting.
130k – 180k
Hybrid3+ YOEDevOps / SRE
About the role
Duties & Responsibilities
Design, deploy, and manage HashiCorp Vault for secret management, encryption, and access control in a zero trust environment.
Implement and maintain secure, scalable, and highly available Vault Primary, DR, and Performance Replica clusters.
Integrate Vault with Kubernetes for dynamic secrets, authentication, and workload identity management.
Collaborate with DevOps and security teams to enforce zero trust security policies and best practices.
Develop and maintain automation scripts and tools for Vault administration and Kubernetes orchestration.
Monitor, troubleshoot, and optimize Vault performance and security in production environments.
Ensure compliance with industry standards for data protection and security (FISMA).
Contribute to the design and implementation of CI/CD pipelines for secure application deployments.
Document processes, configurations, and architecture for knowledge sharing and compliance.
Required Skills
3+ years of experience as a Web Application Engineer, DevOps Engineer, or similar role.
Hands-on experience administering HashiCorp Vault in production environments.
Deep understanding of zero trust security principles and their application in cloud-native platforms.
Proficiency in scripting and automation using languages such as Python or Bash.
Experience with infrastructure-as-code tools (e.g., Terraform, Puppet, Ansible).
Familiarity with CI/CD pipelines and tools (e.g., TeamCity, GitLab CI, ArgoCD).
Knowledge of cloud platforms (e.g., AWS, GCP) and their Kubernetes offerings (e.g., EKS, GKE).
Strong problem-solving skills and ability to troubleshoot complex issues in distributed systems.
Benefits and Salary
Competitive benefits package including medical, dental and vision coverage, 401k plan with employer contribution, paid holidays, vacation, and tuition reimbursement.
Infrastructure Software Engineer building scalable backend systems, observability, and developer tools on the Foundation team. Lead projects on database sharding, event bus, search scaling, and latency; mentor engineers. Requires 5+ years with distributed systems, NoSQL (MongoDB), IaC (Terraform), and architecture ownership.
130k – 215k
Hybrid5+ YOEDevOps / SRE
Linux Systems Engineer (USA)
TrexquantStamford, CT +1
Hands-on Linux Systems Engineer builds and maintains bare-metal servers, manages storage like ZFS, automates with Ansible and Bash, and ensures production reliability. Requires 3+ years Linux experience, physical server management, and on-call rotation with data center travel.
130k – 150k
On-site3+ YOEDevOps / SRE
Software Engineer - Developer Infrastructure
NominalNew York, NY +2
Develop and maintain developer tooling and infrastructure for Nominal's platform, scaling across air-gapped, cloud, and on-prem environments. Requires 4+ years experience with cloud services, Docker, Kubernetes, CI/CD, and ability to mentor engineers.
130k – 230k
On-site4+ YOEDevOps / SRE
Site Reliability Engineer
MercorSan Francisco, CA
Owns production reliability for critical systems, builds SRE function from scratch, introduces modern practices like SLIs/SLOs and error budgets. Requires 5+ years SRE experience with large-scale distributed systems.
130k – 500k
On-site5+ YOEDevOps / SRE
Infrastructure Engineer
MercorSan Francisco, CA
Builds and scales highly available infrastructure using AWS, Terraform, and Docker to support rapid growth and AI workloads. Collaborates with product and research teams on architectures, CI/CD, monitoring, and performance optimization.