About the position
We're determined to make a difference and are proud to be an insurance company that goes well beyond coverages and policies. Working here means having every opportunity to achieve your goals - and to help others accomplish theirs, too. Join our team as we help shape the future. The Hartford's Information Protection (THIP) organization is looking for talented professionals to join a high-performing team that is charged with supporting and enhancing our core Directory Services platforms. As a Directory Services engineer, this position will be part of the primary technical team tasked with engineering and maintaining directory services platforms, specializing in HashiCorp Vault. The individual will have the opportunity to help shape the future direction and use of HashiCorp Vault as currently deployed at the Hartford. Additionally, the position will have broad accountabilities around currency, patching and operational support metrics for Vault. This role will provide thought leadership, professional support and valued contributions to a range of production support, development and project activities. We are looking for an experienced professional, who has a breadth of knowledge and skills across various technical acumens, along with an understanding of industry best practices. The right person will develop a deep understanding of Vaults usage and consumption, continuously advocate for automation and process efficiency, and where necessary challenge and influence management to take actions to appropriately utilize the systems. The role is heavily focused on ensuring currency and stability in the environment. The right person will have a wide-ranging technical knowledge with a desire to learn and grow their technical skills across the noted domains. Technical Expert for engineering and support for HashiCorp Vault - Includes monitoring overall health and well-being of the Vault environments, playing a key role on the current team as an ambassador for currency and stability, and analyzing and implementing required changes, patches and upgrades for Vault. Technical support for DR and Cyber Resilience testing - includes planning, testing and support activities for DR testing and Cyber Resilience recovery testing for Vault. This includes review of current process and designing and implementing improvements and efficiencies. Spearhead growth of Vault into AWS - Accountable for developing the plan and path for integrating HashiCorp Vault into AWS. Includes the plan for new / added infrastructure, design patterns for implementations, partnering with AWS partners for determining best use cases and developing a roadmap for implementation and support. Process design / automation implementation - Includes reviewing the current implementations and processes associated with Vault and helping design more efficient and automated solutions where feasible.
Responsibilities
- Engineering and maintaining directory services platforms, specializing in HashiCorp Vault.
- Monitoring overall health and well-being of the Vault environments.
- Analyzing and implementing required changes, patches, and upgrades for Vault.
- Planning, testing, and support activities for DR testing and Cyber Resilience recovery testing for Vault.
- Reviewing current processes and designing and implementing improvements and efficiencies.
- Developing the plan and path for integrating HashiCorp Vault into AWS.
- Designing more efficient and automated solutions for current implementations and processes associated with Vault.
Requirements
- 2+ years supporting HashiCorp Vault
- 4+ years supporting directory services and/or identity management related technologies
- Expert knowledge in the use and configuration of various secrets engines (LDAP, AWS, KV2, etc.)
- Strong understanding of best practices with short lived credentials and token TTLs
- Understanding of the use of performance cluster and DR clusters
- Powershell / C# .NET knowledge
- Strong overall knowledge of Windows servers
- A track record in production support / system support activities
- Strong decision-making capabilities
- Excellent prioritization capabilities
- Organizational skills to manage multiple tasks simultaneously
- Original and innovative thinking
- Demonstrated ability to develop and implement process improvement initiatives
- BS or MA in Engineering, Computer Science, Information Security, or related field preferred
Nice-to-haves
- Fluent in multiple authentication types and patterns (approle w/ trusted entities, Kerberos, LDAP, Kubernetes, OIDC, etc.)
- Splunk & audit log analysis beneficial
Benefits
- Short-term or annual bonuses
- Long-term incentives
- On-the-spot recognition
