Job Title: Sr Engineer Duration: 6+ months with potential for extensionJob Description: Oujr client is seeking an experienced Senior HashiCorp Vault Application Engineer to join our Information Security - Data Protection & Privacy Engineering group. This is a Contract-to-Hire position reporting to the Associate Director of Data Protection & Privacy. At Activision Blizzard King, we take data privacy very seriously and are rapidly advancing our capabilities to enhance the trust our global audiences have with us about their personal data, as we provide epic interactive gaming and entertainment experiences.We are on the lookout for a seasoned Hashicorp Vault applications integration engineer to lead the way on this mission. This position requires a specialist who has built systems from back to front while ensuring they maintain a high level of security with all things around data security. This includes mastery in Secrets management, Key management features such as KMIP, Key Export to Cloud KMS, Integration with HSM/KMS for Auto-Seal & Unseal of Vault Master Secrets, Data Masking, Format Preserving Encryption (FPE), deep understanding of Tokenization, AES-256 GCM encryption, and a clear understanding of how to embed these techniques into the DNA of our operations.Our engineers are highly collaborative to create epic and efficient applications used by employees worldwide. They work closely together to share knowledge and push the department forward by learning from each other's success and failures via group discussions, lightning talks, paired programming, mentoring, and embracing any technique that keeps us sustainably delivering quality software. They work closely with external teams to make sure we're building the right tools in the most epic way possible. This individual possesses professionalism who can advocate for, teach, and spread the importance and methodologies of data encryption and tokenization across the enterprise.Our ideal candidate understands the challenges companies face integrating data security technologies into work flows and sails ahead with solutions. They have an aptitude for critical thinking and analysis. This role entails not only working with internal customers but external partners to collaborate closely with IT and Data teams. They eat complexity for breakfast and confront ambiguity. They have a sense of ownership and responsibility for everything we produce.Responsibilities:
- Collaborate with application and service teams to seamlessly integrate HashiCorp Vault Data Protection services into their workflows.
- Provide expertise and sample integrations on how HashiCorp Vault integrates with cloud platforms, on-premises systems, and third-party applications.
- Assist application teams with leveraging and provide best practices for data protection using the Transit and ADP-KM & ADP-Transform Engines for application secrets management, key management, data encryption, masking, and tokenization. within their services.
- Collaborate with application developers to understand data flows, and educate them on implementing Advanced Data Protection features, including the benefits and usage of KMIP, BYOK/KMSE, data masking, tokenization, and format preserving encryption/decryption.
- Provide guidance on the use of HashiCorp Vault's API and SDKs.
- Troubleshoot API-related issues and work with developers to optimize their API usage for better performance and security
- Advise application teams on best practices for managing application-specific secrets and configurations
- Develop application-focused documentation that covers integration patterns, api usage, and common pitfalls.
- Work with application teams to ensure proper key management practices are in place by leveraging vault resources.
Requirements:
- Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent experience).
- Proven experience managing HashiCorp Vault clusters, with expertise in the Transit Engine and Advanced Data Protection (ADP) features such as ADP-KM (KMIP, KMSE/BYOK) and ADP-Transform (Tokenization, Masking, FPE/FF3-1)
- Strong knowledge of cryptographic principles, secrets management, and data security best practices.
- Working knowledge of cloud technologies (GCP, AWS, and Azure)
- Relevant certifications, such as HashiCorp Certified Vault Associate or HashiCorp Certified Vault Professional, are desired.
- Proficiency in modern programming languages (.NET, Java, Python)
- Adaptability to evolving technologies and best practices.
Required Skills : Hashicorp, Encryption, Tokenization Scripting with python, powershell, go or java Application side Background Check :YesNotes :Selling points for candidate :Project Verification Info :Candidate must be your W2 Employee :NoExclusive to Apex :NoFace to face interview required :NoCandidate must be local :NoCandidate must be authorized to work without sponsorship ::NoInterview times set : :NoType of project :Master Job Title :Branch Code :