Your Role
As a HashiCorp Vault & PAM Engineer at Capgemini, you will be responsible for managing enterprise secrets, privileged access solutions, and certificate lifecycle processes to ensure secure application and infrastructure access across hybrid environments.
- Perform application onboarding and offboarding activities in HashiCorp Vault, including secret engine configuration, authentication setup, and access provisioning.
- Manage the complete secrets lifecycle including creation, rotation, revocation, and secure storage of credentials using Vault secret engines (KV, DB, PKI).
- Administer and troubleshoot authentication mechanisms including AppRole, Kubernetes Authentication, Certificate-Based Authentication, and TLS integrations.
- Support certificate management activities including certificate issuance, renewal, manual renewals, PKI troubleshooting, and lifecycle governance.
- Collaborate with application, platform, and engineering teams to implement secure credential management, password rotation, disaster recovery onboarding, audit reporting, and operational support.
Your Profile
- Hands-on experience with HashiCorp Vault Core and Advanced Features, including KV, Database, and PKI secret engines, authentication methods, and HCL policy management.
- Strong understanding of Privileged Access Management (PAM) concepts including privileged account governance, password rotation, secure credential storage, and access control.
- Expertise in Certificate Management, PKI, TLS/SSL, and authentication workflows involving AppRole, Kubernetes, and certificate-based authentication.
- Experience with Kubernetes including secrets injection, service accounts, Vault integration, and Kubernetes authentication mechanisms.
- Strong automation and cloud platform knowledge using Python/Bash scripting and integrating Vault with AWS, Azure, and GCP for secure cloud-native access management.
