2 days ago
Base Salary
$139k - $204k/yr
Responsibilities
- Architect and scale Vault clusters and containerized private PKI workloads across commercial, FedRAMP, and DoD IL5 environments.
- Maintain modular Terraform and Terragrunt infrastructure, Helm charts, and Argo CD Application Sets for GitOps operations.
- Lead zero-downtime upgrades and Packer/Docker image pipelines integrated with CI/CD and incident-response workflows.
- Build scalable tenant-isolation models for migrating legacy cryptographic workloads.
- Implement policy-as-code with Sentinel and OPA while meeting FIPS 140-3 and audit requirements.
- Own Prometheus, Grafana, and Splunk telemetry, lead root-cause analysis, and improve operational runbooks.
- Evaluate emerging secrets and identity technologies such as OpenBao and Infisical.
- Support 24x7 production environments and lead incident responses.
Requirements
- 8+ years of experience in DevOps, SRE, or cloud engineering.
- A technical degree or practical experience in place of a degree.
- Hands-on experience deploying and leading HashiCorp Vault at scale, including Raft, replication, and disaster recovery.
- Deep knowledge of AWS services including EKS, IAM, KMS, and VPC, as well as Kubernetes orchestration.
- Experience building reusable Terraform and Terragrunt environments and CI/CD pipelines using GitLab or GitHub Actions.
- Proficiency in Go, Python, or Bash for operational tooling and API-driven automation.
- Experience supporting 24x7 production environments and leading incident responses.
- Preferred experience with FedRAMP, SOC 2, ISO 27001, HSMs such as CloudHSM and Thales Luna, certificate-management protocols including ACME, EST, and SCEP, policy-as-code tools such as OPA, Kyverno, and HashiCorp Sentinel, and enterprise database replication or complex middleware tiers.
Benefits
- Medical, dental, and vision insurance, a 401(k) plan with Cisco matching contributions, paid parental leave, disability coverage, and basic life insurance.
- Eligibility for Cisco restricted stock unit grants and annual bonuses for non-sales roles.
- Paid holidays, birthday leave, year-end shutdown, personal wellness days, vacation or flexible vacation time, sick time, and family emergency leave.
- Optional 10 paid volunteer days per year.
- The posting provides U.S. and Canada salary ranges, with benefits subject to Cisco plan eligibility rules.
About Cisco
Cisco designs and sells networking, security, and collaboration platforms for enterprises, service providers, and governments, spanning routers and switches, Wi‑Fi, firewalls, zero‑trust, observability, and cloud-managed IT (Meraki) plus Webex. Its business model mixes hardware, software subscriptions, and support/consulting services. Founded in 1984 and headquartered in San Jose, California, Cisco is a public company traded on Nasdaq and serves customers across data centers, campuses, and service provider networks.