IT Support Tech

Technical Requirements

• Strong experience implementing and managing HashiCorp Vault Enterprise/Open Source, including authentication methods, secrets engines, policies, namespaces, replication, and access control models.
• Should be capable of deploying, installing, and configuring CyberArk components (Vault, CPM, PVWA, PSM, PSMP, AIM/CCP) as per client requirements.
• Develop custom plugins, integrations, and connectors for CyberArk CPM/PSM Password Safe/PRA components, as required.
• Hands-on experience developing integrations with HashiCorp Vault using REST APIs, Vault SDKs, CLI tools, and automation frameworks.
• Strong programming and scripting skills in Python, Java, Go, PowerShell, Shell Scripting, or JavaScript.
• Experience developing custom solutions for application secrets management, dynamic secrets, token management, certificate lifecycle management, and encryption services.
• Strong understanding of authentication and federation protocols including OAuth 2.0, OpenID Connect (OIDC), SAML, LDAP, Active Directory, and JWT-based authentication.
• Experience integrating Vault with enterprise IAM platforms, cloud identity providers, and authentication services.
• Hands-on experience with Terraform, Ansible, Git, Jenkins, GitHub Actions, Azure DevOps, or similar automation and CI/CD tools.
• Experience integrating HashiCorp Vault with Kubernetes, Docker, OpenShift, and containerized environments.
• Strong understanding of cloud platforms including AWS, Microsoft Azure, and Google Cloud Platform (GCP) and their native secrets and identity services.
• Experience implementing secure API authentication, authorization, and secrets injection mechanisms for web, mobile, and enterprise applications.
• Working knowledge of databases such as SQL Server, Oracle, PostgreSQL, MySQL, and experience configuring Vault dynamic database credentials.
• Experience with high availability, disaster recovery, replication, backup strategies, performance tuning, and operational resilience for Vault deployments.
• Strong understanding of cybersecurity principles including least privilege, zero trust, privileged access, secrets management, encryption, PKI, and certificate management.
• Experience supporting the full Software Development Lifecycle (SDLC), including requirements analysis, development, testing, deployment, troubleshooting, and production support.
• Ability to create technical specifications, workflow diagrams, architecture documents, and implementation runbooks.
• Experience troubleshooting complex Vault, authentication, API integration, and secrets management issues in enterprise environments.
• Familiarity with security monitoring, vulnerability assessment, and compliance frameworks such as NIST, CIS, ISO 27001, PCI-DSS, SOX, and GDPR.