Lead Systems Engineer, Secrets and Vault Engineering
ICE - Jacksonville, FL
Hiring: Lead Systems Engineer, Secrets and Vault Engineering Company: ICE Location: Jacksonville, FL Job Posted Time: 2026-09-10 14:56:16 Employment Type: Full-time / Hybrid Target Skills & Keywords : AWS, Ansible, CI/CD, Configuration Management, Docker, Encryption, GCP, GitHub Actions, GitLab CI, Jenkins, Kubernetes, Linux, OAuth, OIDC, OpenShift, Python, REST, RESTful, ServiceNow, Shell, Systems Engineering, TLS, Terraform, Vault, Zero Trust About the job Experience: •7+ years of infrastructure, platform, or systems engineering experience. •Production experience with HashiCorp Vault — secret engines, authentication methods, policies, and operational concerns. Architect-level depth is not required, but you should have shipped against it and understand how it fits into a broader platform. •Strong proficiency in Python and Shell scripting for automation and tooling. •Solid understanding of identity, authentication, and secure communication protocols (TLS, OAuth, OIDC, x.509). •Solid functional working knowledge of CI/CD tooling (Jenkins, GitHub Actions, GitLab CI, or similar) and Infrastructure-as-Code (Terraform preferred). Required Skills: •Design, build, and maintain platform services for secrets management, certificate lifecycle, encryption key management, and policy enforcement. •Develop automation and tooling in Python and Ansible to streamline operations, enforce security controls, and reduce manual provisioning effort. •Contribute to a self-service model for application teams, including golden-pattern templates, declarative manifests, and approval workflows integrated with enterprise systems such as ServiceNow. •Partner cross-functionally with cross-functional teams (application, infrastructure, security, compliance) to translate requirements into reliable, well-governed services. •Help shape the team's roadmap in emerging areas including workload identity (SPIFFE/SPIRE), policy-as-code, and identity controls for AI and machine-driven workloads. •Participate in code reviews, design reviews, and architecture discussions; mentor and coach engineers earlier in their career. •Contribute to internal documentation, runbooks, and knowledge-sharing. •Participate in a light on-call rotation supporting the team's services. Qualifications: •Bachelor's degree in Computer Science, Engineering, or related field. Compensation: •$149,400 - $180,000 / year Interested candidates, please apply directly through the job posting on company's career page or try via AI auto apply on this platform. Don't miss this opportunity to join a forward-thinking team!