Core Acceleration Utilities — Software Engineer Plus

Role: Core Acceleration Utilities — Software Engineer PlusLocation: Charlotte NC / Dallas TX / McLean VA (100% Onsite)Contract Experience Required: 6 - 9 years of relevant security/platform engineering experience, including enterprise-scale secrets management About the RoleCore Acceleration Utilities is the shared utility layer underneath every other pillar: secrets and PKI, developer-acceleration tooling, ephemeral environments, and the data/metadata plumbing that keeps the rest of the automation estate trustworthy. As a Software Engineer Plus on this team, you will operate and scale HashiCorp Vault as the enterprise's central secrets and PKI platform, while also owning developer-productivity accelerators like AppForge and VMForge.This role sits at the intersection of security engineering, platform automation, and developer experience — you'll need Vault/PKI depth, strong software engineering skills, and a genuine DevEx sense for the tooling other engineering teams depend on daily. Key ResponsibilitiesOperate and scale HashiCorp Vault at enterprise scale, including database, LDAP, SSH, MongoDB, and PostgreSQL secrets engines.Automate PKI issuance and certificate lifecycle management end-to-end — issuance, rotation, and revocation — including a Certificate Factory for OCP and certificate automation for Windows VMs, migrating off legacy tooling such as Venafi and CyberArk.Privileged access modernization: evaluate and pilot HashiCorp Boundary as a modernized alternative to legacy privileged-access tooling.Developer acceleration tooling: build and extend AppForge (containerization acceleration) and VMForge (VM image creation) to improve developer productivity, and build/support ephemeral dev environments from PoC through scale.Build the Secret Transfer Service (STSX), the Data Feed Sync Scheduler, and the Daily Data Reconciliation Orchestrator.Build Infrastructure Metadata Automation and a Data Validation Framework that enforces platform-wide data quality.Contribute to Database Optimization initiatives and the emerging Data API Platform.Implement workload identity patterns and manage API key lifecycle for platforms such as Apigee.Observability: build observability — dashboards, alerting, and audit reporting — into secrets, PKI, and data services.Build Python-based automation to operationalize secrets rotation, access provisioning, and compliance reporting.Develop and maintain CI/CD pipelines and APIs that expose secrets, certificate, and data-quality management as self-service platform capability for engineering teams.Contribute to data modeling efforts that prepare secrets and identity data for AI-readiness (semantics/ontology) and analytics use cases. Must-Have QualificationsHands-on experience operating HashiCorp Vault at enterprise scale, including database, LDAP, and SSH secrets engines.Experience automating PKI and certificate lifecycle management.Experience integrating secrets/PKI platforms with identity and access management systems.Strong Python automation skills.Experience building CI/CD pipelines and APIs for platform capability delivery. Good-to-Have / Preferred QualificationsExperience building or extending internal developer-acceleration tooling comparable to AppForge/VMForge.Experience migrating off Venafi or CyberArk onto modern secrets management platforms, or exposure to HashiCorp Boundary.Experience with observability tooling (dashboards, alerting, audit reporting) for security/platform services.Familiarity with MongoDB and PostgreSQL secrets engines and Apigee API key management.Experience with data validation frameworks, database optimization, or AI-readiness/semantic data modeling.Strong developer experience (DevEx) / product sense for internal platform tooling. Education & ExperienceBachelor's degree in Computer Science, Engineering, Cybersecurity, or a related field, or equivalent hands-on experience.6-9 years of security or platform engineering experience, including at least 3 years operating HashiCorp Vault or an equivalent secrets management platform in production.HashiCorp Vault certification or equivalent demonstrated PKI/secrets management expertise is a plus. What Success Looks LikeA defined percentage of enterprise secrets and certificates are managed through automated Vault/PKI workflows rather than manual processes.Legacy tools (Venafi, CyberArk) are progressively decommissioned in favor of the modernized platform, with Boundary evaluated as a path forward.AppForge/VMForge and ephemeral dev environment adoption grows measurably among engineering teams.Infrastructure metadata automation and data reconciliation orchestration run reliably with minimal manual intervention.