Job Overview:
Location: Kraków (onsite presence required 6 times per month).
Engagement: B2B | 190–220 PLN netto/hour.
We are seeking an experienced HashiCorp Vault Engineer to join the PAM Engineering Function within the global Identity and Access Management (IAM) Technology organisation. The person in this role will be responsible for the on-premises HashiCorp Vault service, supporting backend infrastructure, leading improvement initiatives, and contributing to the stability, automation, and resilience of critical privileged access management (PAM) services. The role reports into a dedicated Vault pod and involves collaboration with globally distributed engineering teams to support Vault adoption and operational excellence.
Responsibilities:
- Operate and maintain the on-premises HashiCorp Vault environment, ensuring availability and secure configuration.
- Lead backend engineering initiatives, upgrades, remediations, and configuration improvements for Vault services.
- Design and implement best-practice Vault architectures and instance provisioning patterns.
- Develop documentation, runbooks, and self-service materials for internal engineering teams and stakeholders.
- Improve service health, automation, operational resilience, and runbook-driven incident response.
- Act as subject matter expert for Vault in solution design and strategic programmes, providing technical guidance to project teams.
- Build and maintain relationships with business stakeholders and cross-functional technical teams to align service delivery with requirements.
- Support incident response, crisis call coordination, and out-of-hours incident or change activities when required.
- Contribute to the design and implementation of enterprise monitoring and alerting for Vault and related infrastructure.
Requirements:
- Minimum 3 years of hands-on experience with HashiCorp Vault, preferably in on-premises deployments.
- Minimum 3 years of experience with HashiCorp Terraform and infrastructure automation tooling.
- Proven experience with release automation tools such as Ansible AAP and Jenkins.
- Solid background in backend infrastructure management, including upgrades, remediation, configuration improvements, and troubleshooting design inefficiencies.
- Experience managing crisis calls and delivering root cause analysis and remediation for complex incidents.
- Practical experience designing enterprise-level monitoring and alerting solutions (e.g., Splunk, Grafana, AppDynamics, SCOM).
- Familiarity with large-scale enterprise technologies and operating in Agile environments using Jira and Jira Service Desk.
- Strong collaboration skills and the ability to translate stakeholder requirements into technical solutions.
Nice to Have:
- Experience with coding, scripting, and GitHub best practices.
- Familiarity with audit and compliance processes related to secrets management and privileged access.
- Experience with Scrum Master responsibilities or managing Jira boards.
- Proven ability to learn new technologies quickly and work independently.
- Strong written communication, influencing, and technical report preparation skills.
- Experience working in multicultural, distributed teams.
Benefits:
- Opportunity to work on high-profile, strategic IAM and PAM initiatives across a large organisation.
- Exposure to modern security, automation and monitoring technologies.
- Flexible working model with a hybrid schedule aligned to the onsite requirement.
- Supportive international engineering environment and collaboration with global teams.
- Benefits package including Multisport Card and Luxmed.