Description:
Anaplan is looking for a Principal Engineer to lead the design and build of a new, multi-region HashiCorp Vault platform. This is a pivotal role where you will serve as our Subject Matter Expert (SME), shaping the future of secrets management and governance for a platform that supports hundreds of engineers and top-flight companies around the world.
This is a hybrid role requiring at least two days a week in our Manchester office.
Your Impact
- Lead the architecture, design, and implementation of a new, multi-region HashiCorp Vault platform on public cloud.
- Take ownership of the solution architecture, creating and maintaining high-quality design documents and Architecture Decision Records (ADRs).
- Ensure platform resilience by developing and testing robust strategies for performance, Disaster Recovery (DR), and High Availability (HA).
- Act as the primary SME for the organisation on all aspects of Vault and modern secrets management, actively championing and evangelising best practices.
- Collaborate with and influence stakeholders, platform teams, and software engineers to ensure the smooth and secure integration of their services with the Vault ecosystem.
- Partner with Security to define the control requirements for the Vault platform (policy standards, privileged access, audit/evidence, compliance needs) and ensure designs meet those requirements.
- Lead regular security design reviews for Vault architecture decisions (authn/authz, policy model, namespaces/tenancy, seal strategy with KMS/HSM, audit logging) and drive alignment/sign-off with Security.
- Establish joint operating processes with Security for incident response and investigations, including break-glass access, audit log access patterns, and post-incident remediation.
- Coach and mentor other engineers on security best practices and the adoption of the new secrets management platform.
Your Skills
- You have hands-on expertise in designing, implementing, and operating HashiCorp Vault in large-scale production environments.
- Proven experience with multi-region deployments on public cloud platforms, preferably AWS. Experience with GCP and Azure is also highly valuable.
- Proficient with Infrastructure as Code (IaC) and Terraform.
- Knowledge of modern authentication and authorisation mechanisms (e.g., OIDC, SAML, JWT).
- Experience managing Public Key Infrastructure (PKI) and certificate lifecycles.
- Experience with observability tooling such as Grafana, Prometheus, and Loki.
- Proficient with Kubernetes and managed Kubernetes platforms such as EKS, GKS, and AKS.
- Experience with Kubernetes tooling such as Helm and Argo CD.
- You have a quality-first mindset with demonstrable experience in creating and automating testing strategies for critical infrastructure.
- You are happy to write and maintain clear documentation for other teams.
- You have excellent communication skills, with a proven ability to influence technical direction and mentor both junior and senior engineers.
Bonus Points For:
- Scripting or development experience in Go, Python, or similar.
- Experience writing or maintaining Kubernetes Operators.