Tech Stack
Job Description, Responsibilities & Requirements
About the Position
Platform Engineer – Hashi Vault IRC298441
Function: Software Product Engineering
Location: United Kingdom - London
Work Model: Hybrid
Responsibilities
Architecture & Infrastructure Management
- Deploy and Maintain: Manage the lifecycle of HashiCorp Vault clusters across multiple environments (Dev, Stage, Prod).
- High Availability: Ensure 99.9% uptime through proper configuration of storage backends (like Raft or Consul) and unseal workflows (Auto-unseal via KMS/Cloud HSM).
- Upgrades & Scaling: Perform seamless version upgrades and scale the infrastructure to handle increasing request volumes.
Secrets Lifecycle & Governance
- Engine Configuration: Implement and manage various secret engines, including KV (Key-Value), Dynamic Secrets (AWS, Azure, SQL databases), and PKI (Public Key Infrastructure) for automated certificate issuance.
- Policy Authoring: Write and enforce “Least Privilege” access policies using HCL (HashiCorp Configuration Language) to ensure users and machines only see what they absolutely need.
- Auth Method Integration: Integrate Vault with identity providers such as LDAP, Okta, OIDC, and cloud-native IAM roles.
Developer Enablement & Integration
- Onboarding: Act as the primary consultant for engineering teams to migrate hardcoded secrets/environment variables into Vault.
- Pipeline Integration: Secure CI/CD pipelines (GitHub Actions, GitLab, Jenkins) by injecting secrets at runtime using Vault agents or injectors.
- SDK Support: Provide guidance to developers on using Vault APIs and client libraries (e.g., HVAC for Python, Spring Cloud Vault).
Security, Auditing & Compliance
- Audit Logging: Monitor and analyze Vault audit logs to detect anomalous behavior or unauthorized access attempts.
- Disaster Recovery: Establish and regularly test Backup/Restore procedures and replication (Performance vs. DR replication).
- Secret Rotation: Automate the rotation of long-lived credentials to minimize the blast radius of a potential leak.
Requirements
- Proven experience as a Platform Engineer, DevOps Engineer, or SRE
- Strong background in Secrets Management using Hashi Vault
- Solid understanding of DevOps principles, CI/CD pipelines, and system automation
- Strong grasp of platform reliability, resilience, and scalability best practices
- Ability to work independently, adapt quickly, and collaborate effectively across engineering teams
- Excellent communication skills for both technical and cross-functional stakeholders
We Offer
Our goal is to build an inclusive positive culture where everyone can feel comfortable being themselves, empowering people to create their own high standards and therefore more value. We work together to promote fairness while recognizing, valuing, and embracing differences – providing a transparent support structure and generous training budget to help our people develop skills to progress their career. Our region supports a hybrid model that can flex across a wide spectrum of working options determined by business, customer, and individual needs.
You'll benefit from a comprehensive health and wellness plan, private healthcare (clinical and mental wellbeing), discounted gym memberships, and in-office yoga sessions and massages. We offer a fantastic benefits package including a competitive pension scheme and recognition schemes through bonus/reward initiatives. Colleagues are entitled to an annual volunteering day – so you can take time to support a cause close to your heart. We also love to stay social with trips to the zoo, quiz nights, sports events, theatre trips, and much more.
We are an equal opportunities employer. It is our policy to promote an environment free from discrimination, harassment, and victimization, and we actively welcome applications from people with a disability or long-term health condition. As users of the Disability Confident scheme, we guarantee to interview all disabled applicants who meet the minimum essential criteria for this vacancy.
We are committed to providing reasonable adjustments. If you require any adjustments for the application process, the interview, or the job itself, or if you need this information in an accessible format, please contact [email protected].
About the Company
GlobalLogic, a Hitachi Group Company, is a trusted digital engineering partner to the world’s largest and most forward-thinking companies. Since 2000, we’ve been at the forefront of the digital revolution – helping create some of the most innovative and widely used digital products and experiences. Today we continue to collaborate with clients in transforming businesses and redefining industries through intelligent products, platforms, and services.