Responsibilities:
• Design Highly Scalable Vault Clusters on AWS Cloud.
• Setup HA using PR and DR clusters, ensuring vault functionality even on regional failure.
• Setup access control and RBAC access using a mix of AD/Approle/TLS Auth and Policies.
• Enabling Secret Engines for Databases, KV, Transit, Transform, LDAP, KMS.
• Designing up automated onboarding framework for Applications.
• Writing and Managing IaC code for Vault clusters, with a modularised approach. The focus in this process is to make sure vault clusters can be spun up on demand with PR and DR enabled.
• Setting up Monitoring and Alerting for Vault metrics and logs using CloudWatch and OpenSearch.
• Ensuring security and governance compliance for Hashicorp Vault within client side.
Requirements:
Experience in Vault clusters.
Experience in setting up hashicorp using clusters
Experience in developing containerized ecosystems with complete CI/CD setup as per customer requirements (docker swarm, Mirantis Kubernetes, OpenShift, AWS EKS)
Experience in setting up Kubernetes platform using Prometheus & grafana