{"id":3107291,"url":"https://alion.io/job/depository-trust-clearing-corporation-senior-vault-engineer","title":"Senior Vault Engineer","company":{"id":1759477,"name":"Depository Trust & Clearing Corporation","domain":"dtcc.com","url":"https://alion.io/company/dtcc-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":79,"open_postings":80,"ghost_share":0,"stale_share":0.85,"repost_share":0.013,"time_to_fill_p50_days":35,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Coppell, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":75000,"max_usd":143000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":6333},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"GitLab","optional":false},{"name":"Groovy","optional":false},{"name":"HashiCorp Vault","optional":false},{"name":"IAM","optional":false},{"name":"Jenkins","optional":false},{"name":"Kubernetes","optional":false},{"name":"LDAP","optional":false},{"name":"Least Privilege","optional":false},{"name":"PKI","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Service Mesh","optional":false},{"name":"Terraform","optional":false},{"name":"Vault","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-22T16:21:41Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-11-01T23:59:29Z","board_verified":true,"closed_at":null,"days_open":10,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":10},"description":"Are you ready to make an impact at DTCC?\nDo you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We are committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve.\nThe Information Technology group delivers secure, reliable technology solutions that enable DTCC to be the trusted infrastructure of the global capital markets. The team delivers high-quality information through activities that include development of essential, building infrastructure capabilities to meet client needs and implementing data standards and governance.\nPay and Benefits:\nCompetitive compensation, including base pay and annual incentive\nComprehensive health and life insurance and well-being benefits, based on location\nPension / Retirement benefits\nPaid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.\nDTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).\nThe Impact you will have in this role:\nBeing a member of CISO Team, this role is for a Senior Vault Engineer to design, implement, and manage enterprise-scale secrets management and machine identity solutions across on-premises and cloud environments. This role requires deep expertise in HashiCorp Vault, modern authentication and authorization patterns, automation, and zero-trust security principles. The ideal candidate will have experience implementing secure secret delivery mechanisms, short-lived credentials, dynamic secrets, and workload identities while driving adoption of security-first engineering practices across development, operations, and platform teams.\nYour Primary Responsibilities:\nDesign, deploy, and maintain HashiCorp Vault infrastructure across on-premises and cloud platforms (AWS or equivalent).\nImplement and manage secure secret management solutions ensuring high availability, scalability, and resilience.\nConfigure and support Vault authentication methods and Vault secret engines.\nIntegrate Vault with CI/CD pipelines, Kubernetes platforms, cloud services, and enterprise identity providers.\nAutomate secret provisioning, rotation, access control, and certificate lifecycle management using Infrastructure-as-Code and scripting.\nDrive adoption of Zero Trust principles, least-privilege access, and short-lived/ephemeral credentials to eliminate hardcoded secrets.\nDevelop automation and integrations.\nTroubleshoot and resolve issues related to Vault, authentication workflows, PKI, networking, and cloud integrations.\nSupport compliance, audit, and security requirements within regulated environments.\nNOTE: The Primary Responsibilities of this role are not limited to the details above.*\nQualifications:\nBachelor’s degree and/or equivalent in Cyber Security or related field \nMin 6 years of relevant experienc\nTalents Needed for Success:\n5+ years of experience in security engineering, cloud infrastructure, platform engineering, or DevSecOps.\nDeep understanding of authentication, authorization, identity federation, and access management concepts.\nStrong experience implementing Vault authentication methods including OIDC, LDAP, Kubernetes, AppRole, JWT, AWS IAM, and certificate-based authentication.\nHands-on experience deploying and managing Vault secret engines including KV, PKI, Database, Transit, AWS/Azure Secrets, SSH, and Dynamic Secrets.\nExperience designing solutions using dynamic secrets, leased credentials, and secret rotation frameworks.\nStrong understanding of Zero Trust Architecture, machine identities, workload identities, least privilege, and security-by-design principles.\nAdvanced automation and DevOps experience using Python, Terraform, Jenkins, GitLab, Groovy, and REST APIs.\nExperience integrating Vault with Kubernetes, service mesh technologies, and modern platform engineering ecosystems.\nStrong troubleshooting skills across networking, TLS, PKI, cloud infrastructure, authentication systems, and distributed platforms.\nPreferred Qualifications\nKnowledge of PKI, certificate lifecycle management, HSMs, and enterprise key management solutions.\nExperience with AWS, Azure, or multi-cloud environments.\nExperience with monitoring and observability platforms.\nHashiCorp Vault, cloud, Kubernetes, or security-related certifications.\nExperience working in highly regulated industries such as financial services.\nExperience with SPIFFE/SPIRE, workload identity, or service-to-service authentication frameworks.\nThe salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.","description_format":"text","description_chars":5609,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Life insurance","Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Stock Exchanges & Market Infrastructure","Custody & Fund Administration"],"lifecycle":[{"event":"open","at":"2026-10-22T19:39:10Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":10,"expected_fill_days":35,"reasons":["conf:6","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-02T06:13:15Z"},"pay":null,"html_url":"https://alion.io/job/depository-trust-clearing-corporation-senior-vault-engineer","json_url":"https://alion.io/job/depository-trust-clearing-corporation-senior-vault-engineer.json","meta":{"generated_at":"2026-11-02T11:50:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16258,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1759477},"rest":"https://alion.io/mcp/rest/get_company?id=1759477"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdepository-trust-clearing-corporation-senior-vault-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdepository-trust-clearing-corporation-senior-vault-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdepository-trust-clearing-corporation-senior-vault-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/depository-trust-clearing-corporation-senior-vault-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdepository-trust-clearing-corporation-senior-vault-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3107291}},{"tool":"search_jobs","arguments":{"company":"dtcc.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3107291},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}