Security Engineer – HashiCorp Vault

JOB SUMMARY

We are seeking a talented HashiCorp Vault System Engineer to join our growing team. In this role, you will be responsible for managing and maintaining the HashiCorp Vault infrastructure, ensuring high availability, scalability, and security of secrets management for our enterprise systems.

 

CANDIDATE PROFILE

Education and Experience

Required:

• Bachelor’s degree in computer sciences or related field or equivalent experience / certification
• 5+ years of information technology engineering experience
• 3+ years hands-on HashiCorp or similar technology in a production environment
• Cloud Platforms: 2+ years’ experience with Cloud platforms (e.g. AWS, Azure, Google) and Vault integration in cloud environments.
• 1+ years’ experience with security protocols such as TLS, PKI, authentication mechanisms, etc.

Additional experience and skills strongly preferred

• Proficiency with Terraform or similar IaC tools to automate Vault deployments.
• Strong scripting skills in Bash, Python, or similar languages for automating Vault operations and integration tasks.
• Experience working with tools like Jenkins, GitLab, or Bamboo for automating Vault management and integration into pipelines.
• Familiarity with Linux (preferably RedHat, CentOS, or Ubuntu) and Windows environments.
• Understanding of network configurations and concepts such as VPN, firewalls, load balancing, and DNS.
• Experience with Vault Enterprise features such as policies, namespaces, and enterprise HA setup.
• Experience with containerization technologies like Docker and orchestration platforms like Kubernetes, particularly for Vault deployments.
• Knowledge of integrating Vault in a DevSecOps culture to enable automated and secure workflows.
• HashiCorp Certified or other relevant certifications (e.g., CISSP, CISM).

 

CORE WORK ACTIVITIES

• Participates with a group of stakeholders in the creation and deployment of security processes that benefit from the HashiCorp Vault solution.
• Work with group of stakeholders to support onboarding new applications and services.
• Define, document, and enforce HashiCorp Vault policies and procedures.
• Create test cases to ensure cross platform interoperability.
• Implement and validate security controls for the HashiCorp Vault solution.
• Design security solutions to adequately address risks throughout the Marriott SDLC process.
• Monitor the HashiCorp Vault solution service levels, and triage issues reported by the 24/7 operations team.
• Support the identification and remediation of security events.

 

The salary range for this position is $119,000 to $148,100 annually. In addition to the annual salary, the position will be eligible to receive an annual bonus.

Washington Applicants Only: Employees will accrue 0.04616 PTO balance for every hour worked and eligible to receive minimum of 7 holidays annually.

All locations offer coverage for medical, dental, vision, health care flexible spending account, dependent care flexible spending account, life insurance, disability insurance, accident insurance, adoption expense reimbursements, paid parental leave, educational assistance, 401(k) plan, stock purchase plan, discounts at Marriott properties, commuter benefits, employee assistance plan, and childcare discounts.  Benefits are subject to terms and conditions, which may include rules regarding eligibility, enrollment, waiting period, contribution, benefit limits, election changes, benefit exclusions, and others.

Marriott HQ is committed to a hybrid work environment that enables associates to Be connected.  Headquarters-based positions are considered hybrid, for candidates within a commuting distance to Bethesda, MD;  candidates outside of commuting distance to Bethesda, MD will be considered for Remote positions.

The application deadline for this position is 28 days after the date of this posting, December 11, 2024.
 

 

Marriott International is an equal opportunity employer. We believe in hiring a diverse workforce and sustaining an inclusive, people-first culture. We are committed to non-discrimination on any protected basis, such as disability and veteran status, or any other basis covered under applicable law.