HashiCorp Vault

Your Role As a HashiCorp Vault & PAM Engineer at Capgemini, you will be responsible for managing enterprise secrets, privileged access solutions, and certificate lifecycle processes to ensure secure application and infrastructure access across hybrid environments. Perform application onboarding and offboarding activities in HashiCorp Vault , including secret engine configuration, authentication setup, and access provisioning. Manage the complete secrets lifecycle including creation, rotation, revocation, and secure storage of credentials using Vault secret engines (KV, DB, PKI). Administer and troubleshoot authentication mechanisms including AppRole , Kubernetes Authentication , Certificate-Based Authentication , and TLS integrations. Support certificate management activities including certificate issuance, renewal, manual renewals, PKI troubleshooting, and lifecycle governance. Collaborate with application, platform, and engineering teams to implement secure credential management, password rotation, disaster recovery onboarding, audit reporting, and operational support. Your Profile Hands-on experience with HashiCorp Vault Core and Advanced Features , including KV, Database, and PKI secret engines, authentication methods, and HCL policy management. Strong understanding of Privileged Access Management (PAM) concepts including privileged account governance, password rotation, secure credential storage, and access control. Expertise in Certificate Management, PKI, TLS/SSL , and authentication workflows involving AppRole, Kubernetes, and certificate-based authentication. Experience with Kubernetes including secrets injection, service accounts, Vault integration, and Kubernetes authentication mechanisms. Strong automation and cloud platform knowledge using Python/Bash scripting and integrating Vault with AWS, Azure, and GCP for secure cloud-native access management.