Sr. PKI, HashiCorp Operations Engineer

Capgemini is seeking a Sr. PKI, HashiCorp Operations Engineer to support global secrets management and information security cryptography services. This remote role is based in the USA.

Your Role

• Implement and provide ongoing DevSecOps and operations support for global secrets management services using certificate lifecycle management, PKI solutions, and data protection technologies.
• Support information security cryptography services covering encryption, key and secrets management, tokenization, and related data protection technologies.
• Participate as a technical lead on a team of secrets management engineers.
• Author, edit, provide, and review procedures, standards, and other security infrastructure documentation.
• Engineer, implement, and operate security measures protecting computer systems, networks, and information.
• Support disaster recovery planning, operations, and data backups as needed.
• Administer and support infrastructure related to API and application security, firewalls, encryption, intrusion detection, PKI, secrets management, vulnerability scanning, security monitoring, penetration testing, authentication, web filtering, identity management, and access control.
• Coordinate with program managers, scrum masters, architects, developers, engineers, and security leaders to drive delivery, communicate risks, and establish secrets management standards.
• Serve as a subject-matter expert to other Information Security team members.

Certificate Management Activities

• Manage certificate and key lifecycles, including SSH and TLS certificates.
• Develop certificate and key management policies, processes, and templates.
• Create administrative and technical documentation.
• Manage user issues, metrics, monitoring, reporting, ordering fulfillment, and queue management.
• Manage PKI infrastructure and conduct PKI performance and SLA reviews.

Skills and Experience

• Bachelor's degree in Computer Science, Engineering, or a related field, or a high school diploma/GED with the required technology and Information Security experience.
• At least 5 years of experience in PKI and HashiCorp operations.
• Experience leading remote offshore teams and delivering results.
• Strong customer management, communication, analytical, problem-solving, and organizational skills.
• Hands-on expertise with API, AWS, Cloudera, Docker, encryption, HashiCorp Vault, Kubernetes, Java, Linux, Perl, PKI, Protegrity, Python, secrets management, Thales/Vormetric, and tokenization is strongly preferred.
• Experience with DevOps, engineering or operations, Python, API development, CI/CD pipelines, Jenkins, cryptography management, certificate lifecycle management, secrets management, and tokenization technologies is desirable.
• Understanding of cloud deployment and service models from development, infrastructure, and information security perspectives.

Compensation and Benefits

The base compensation range is $70,176–$170,040, depending on legally permitted factors such as location, education, qualifications, certifications, experience, seniority, performance, and market considerations. The role is eligible for Capgemini's comprehensive benefits package for regular, full-time employees, which may include paid time off, holidays, medical, dental and vision coverage, retirement savings plans, life and disability insurance, and employee assistance programs.

Capgemini is an Equal Opportunity Employer committed to inclusion and reasonable accommodation throughout the recruitment process.