Beschreibung
For our client we are looking for a DevOps/ Secrets Manager Engineer (f/m/d)Outline data:
Start: asap
Duration: 31.12.2024++
Workload: Full-time preferred
Location: 25% Berlin onsite, 75% remote (3 weeks remote / 1 week Berlin)
Budget: 80,00 EUR netto remote, 92,25 EUR onsite
Role:
The individual must be at a mid-level in development, operations, and engineering with proven skills and experience with
- Automate the setup and configuration of HashiCorp Vault in Kubernetes in GCP using CI/CD based on GitLab & ArgoCD and later on also extend it to on premise deployments.
- Integrate various tools and services and configure secret storage and sharing based on functional and technical concepts provided IT architects via Terraform scripts.
Targets:
As a Vault DevOps Engineer for the team, the targets for this role would focus on:
- Automating the setup and seamless integration of HashiCorp Vault within Kubernetes on the Google Cloud Platform (GCP), extending these configurations to on-premise deployments for a unified, secure infrastructure.
- Streamlining secret management through the development of (Terraform) scripts, enabling efficient secret storage and sharing in line with IT architecture specifications.
- Serving as a key liaison for development teams, providing technical and operational support to meet their security and operational needs regarding secret management.
- Continuously updating and applying best practices in Vault architecture to ensure the EDP platform remains secure and efficient, enhancing the software development process in addressing energy sector challenges.
- This role aims to drive the EDP team's mission forward by leveraging cutting-edge technologies and practices in secrets management to facilitate secure and efficient software development.
Skills (must-have):
- Experience with cloud and on-premise services and their configuration
- Experience in using public clouds (preferably GCP, Azure)
- Knowledge of Kubernetes and container deployment
- Experience with CI/CD, helm charts/terraform, GitOps, and general automation of setup and configuration of tooling
- Experience with configuring Hashicorp Vault (Enterprise) and its use as a Secrets Manager
- Soft skills (role must be communicating a lot with other teams)
- Fluent English in speech and writing (min. C1)
Skills (should-have):
- Experience with Vault Secret Operator (VSO)
- Experience with the broader Vault architecture and its best-practices
- Within Hashicorp Vault: Experience with service account generation, namespaces, secret engines, auth backends, entities, AppRole
- Basic knowledge of Public key infrastructure (PKI)
- Knowledge about Hardware Security Module (HSM), needs to be integrated with infrastructure level
- Knowledge about IAM solutions based on OpenID Connect (OIDC), such as Keycloak, for auth backends
- Fluent in German
- Working with Scrum and general experience in agile frameworks