Job Description

Black Canyon Consulting (BCC) is actively looking for a skilled Hashicorp Vault Application Engineer/Administrator to join our team, focusing on the design and implementation of on premises and cloud HashiCorp Vault clusters. You will play a critical role in ensuring secure secret management, identity-based access, and seamless integration within our onprem and cloud-native (AWS and GCP) hybrid infrastructure. This position requires expertise in Hashicorp Vault, and Zero Trust security principles, along with a passion for building reliable and scalable systems. This opportunity is full time and onsite at the NIH-NCBI in Bethesda, MD and/or remote work.

NCBI is part of the National Library of Medicine (NLM) at NIH. NCBI is the world’s premier biomedical center hosting over six million daily users that seek research, clinical, genetic, and other information that directly impacts biomedical research and public health – at NCBI you can literally help to accelerate cures for diseases! NCBI’s wide range of applications, platforms (node, python, Django, C++, you name it) and environments (big data [petabytes], machine learning, multiple clouds) serve more users than almost any other US Government Agency according to https://analytics.usa.gov/

We attract the best people in the business with our competitive benefits package that includes medical, dental and vision coverage, 401k plan with employer contribution, paid holidays, vacation, and tuition and conference reimbursement. If you enjoy being a part of a high performing, professional service and technology focused organization, please apply today!

Duties & Responsibilities:

• Design, deploy, and manage HashiCorp Vault for secret management, encryption, and access control in a zero trust environment.
• Implement and maintain secure, scalable, and highly available Vault Primary, DR, and Performance Replica clusters.
• Integrate Vault with Kubernetes for dynamic secrets, authentication, and workload identity management.
• Collaborate with DevOps and security teams to enforce zero trust security policies and best practices.
• Develop and maintain automation scripts and tools for Vault administration and Kubernetes orchestration.
• Monitor, troubleshoot, and optimize Vault performance and security in production environments.
• Ensure compliance with industry standards for data protection and security (FISMA).
• Contribute to the design and implementation of CI/CD pipelines for secure application deployments.
• Document processes, configurations, and architecture for knowledge sharing and compliance.

Required Skills:

• 3+ years of experience as a Web Application Engineer, DevOps Engineer, or similar role.
• Hands-on experience administering HashiCorp Vault in production environments.
• Deep understanding of zero trust security principles and their application in cloud-native platforms.
• Proficiency in scripting and automation using languages such as Python or Bash.
• Experience with infrastructure-as-code tools (e.g., Terraform, Puppet, Ansible).
• Familiarity with CI/CD pipelines and tools (e.g., TeamCity, GitLab CI, ArgoCD).
• Knowledge of cloud platforms (e.g., AWS, GCP) and their Kubernetes offerings (e.g., EKS, GKE).
• Strong problem-solving skills and ability to troubleshoot complex issues in distributed systems.

Benefits and Salary

We attract the best people in the business with our competitive benefits package that includes medical, dental and vision coverage, 401k plan with employer contribution, paid holidays, vacation, and tuition reimbursement.

We offer a competitive salary commensurate with experience and location. The targeted range for this position is $130,000 - $180,000.

If you enjoy being a part of a high performing, professional service and technology focused organization, please apply today!