SR.ENGINEER

Only on W2 Job Title: Sr Engineer Duration: 6+ months with potential for extension Location : 100% Remote Job Description: Our client is seeking an experienced Senior HashiCorp Vault Infrastructure Engineer to join our Information Security - Data Protection & Privacy Engineering group. This is a Contract-to-Hire position reporting to the Associate Director of Data Protection & Privacy. We take data privacy very seriously and are rapidly advancing our capabilities to enhance the trust our global audiences have with us about their personal data, as we provide epic interactive gaming and entertainment experiences. This position will advance our capabilities to build a world-class data privacy and protection platform that spans across the enterprise to ensure we have the strengthened data protection services. Our engineers are highly collaborative to create epic and efficient applications used by employees worldwide. They work closely together to share knowledge and push the department forward by learning from each other’s success and failures via group discussions, lightning talks, paired programming, mentoring, and embracing any technique that keeps us sustainably delivering quality software. They work closely with external teams to make sure we're building the right tools in the most epic way possible. Our ideal candidate will have a strong background with DevOps and SRE principles and an aptitude for critical thinking and analysis. In this pivotal role, you’ll be at the forefront of deploying, optimizing, maintaining, and scaling our Vault clusters. This role entails not only working with internal customers but external partners to collaborate closely with IT and Data teams. They eat complexity for breakfast and confront ambiguity. They have a sense of ownership and responsibility for everything we produce. Responsibilities: • Deploy, configure, and maintain HashiCorp Vault clusters, ensuring that Vault infrastructure is highly available, scalable, and secure. • Set up comprehensive monitoring and alerting systems to proactively identify and address Vault-related issues. • Investigate and troubleshoot incidents, performance bottlenecks, and access-related problems promptly. • Stay up-to-date with the latest releases and apply upgrades and patches as needed. • Design, implement, and manage the Transit, ADP-KM and ADP Transform Engines for application secrets management, key management, data encryption, masking, and tokenization. • Work with the team to develop and enforce vault policies for data encryption, masking, tokenization, ensuring data privacy and security. • Work with IAM to establish and enforce access controls, policies, and audit trails to protect sensitive data and ensure compliance. • Ensure strict adherence to industry standards and best practices for secrets management and data security. • Work collaboratively with development and operational teams to manage secrets, encryption keys, and cryptographic materials securely. • Treat everything-as-code including standing up cloud (such as GCP) infrastructure using terraform. • Implement and manage DevOps with CI/CD and build out and own deployment pipelines. • Create and maintain thorough documentation pertaining to Vault configurations, policies, and procedures. • Develop and maintain robust backup and disaster recovery procedures to guarantee data integrity and availability. Requirements: • Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent experience). • Proven experience managing HashiCorp Vault clusters, with expertise in the Transit Engine and Advanced Data Protection (ADP) features such as ADP-KM (KMIP, KMSE/BYOK) and ADP-Transform (Tokenization, Masking, FPE/FF3-1) • Strong knowledge of cryptographic principles, secrets management, and data security best practices. • Experience deploy and operate an enterprise-grade key management, encryption and tokenization service platforms • Working knowledge of cloud technologies (GCP, AWS, and Azure). • Understanding of containerization and orchestration technologies (e.g., Docker, Kubernetes) is beneficial. • Relevant certifications, such as HashiCorp Certified Vault Associate or HashiCorp Certified Vault Professional are desired. • Adaptability to evolving technologies and best practices. • Knowledge and experience of Confidential Computing or Secure Enclaves is a differentiating fac -- -- ---- Thanks & Regards, Mounika | Technical Recruiter Thoughtwave Software and Solutions Email:Mounika@thoughtwavesoft.com linkedin:https://www.linkedin.com/in/sai-mounika-002553286/