HashiCorp Vault

Your Role

As a HashiCorp Vault & PAM Engineer at Capgemini, you will be responsible for managing enterprise secrets, privileged access solutions, and certificate lifecycle processes to ensure secure application and infrastructure access across hybrid environments.

• Perform application onboarding and offboarding activities in HashiCorp Vault, including secret engine configuration, authentication setup, and access provisioning.
• Manage the complete secrets lifecycle including creation, rotation, revocation, and secure storage of credentials using Vault secret engines (KV, DB, PKI).
• Administer and troubleshoot authentication mechanisms including AppRole, Kubernetes Authentication, Certificate-Based Authentication, and TLS integrations.
• Support certificate management activities including certificate issuance, renewal, manual renewals, PKI troubleshooting, and lifecycle governance.
• Collaborate with application, platform, and engineering teams to implement secure credential management, password rotation, disaster recovery onboarding, audit reporting, and operational support.

Your Profile

• Hands-on experience with HashiCorp Vault Core and Advanced Features, including KV, Database, and PKI secret engines, authentication methods, and HCL policy management.
• Strong understanding of Privileged Access Management (PAM) concepts including privileged account governance, password rotation, secure credential storage, and access control.
• Expertise in Certificate Management, PKI, TLS/SSL, and authentication workflows involving AppRole, Kubernetes, and certificate-based authentication.
• Experience with Kubernetes including secrets injection, service accounts, Vault integration, and Kubernetes authentication mechanisms.
• Strong automation and cloud platform knowledge using Python/Bash scripting and integrating Vault with AWS, Azure, and GCP for secure cloud-native access management.