Software Engineering Architect

Senior DevOps Engineer, Cryptographic Services

Cisco's Security & Trust Organization (STO) is the backbone of our global customer ecosystems. The Cryptographic Services team builds and operates the zero-trust infrastructure that secures digital identities and secrets at enterprise scale. We aren't just leading infrastructure; we are defining how Cisco protects its most critical data assets.

Our Team Powers Two High-Impact Enterprise Platforms

• Enterprise Secrets Management: A centralized service built on Vault Enterprise, safeguarding credentials and encryption keys across multi-cloud and high-compliance boundaries (including FedRAMP and DoD IL5).
• Private PKI & CA Platform: A high-assurance, automated certificate lifecycle service on AWS EKS that secures internal microservices, cloud applications, and global supply chains.

What You'll Do (Your Impact)

As a Senior DevOps Engineer, you will blend platform engineering, cloud architecture, and Site Reliability Engineering (SRE) to build resilient infrastructure.

• Architect and Scale: Drive the reliability and scalability of Vault clusters and containerized CA workloads across diverse environments (FedRAMP, IL5, and commercial).
• Modernize Infrastructure: Build our GitOps future by maintaining modular Terraform/Terragrunt, Helm charts, and Argo CD Application Sets.
• Automate Lifecycles: Lead zero-downtime upgrades and image pipelines (Packer/Docker) that integrate seamlessly with CI/CD and incident response workflows.
• Enable Tenants: Build scalable isolation models that allow business units to migrate legacy cryptographic workloads to our modern, automated platforms.
• Champion Compliance: Implement "Policy-as-Code" (Sentinel, OPA) and ensure our infrastructure meets meticulous FIPS 140-3 and audit standards.
• Optimize Performance: Own end-to-end telemetry (Prometheus/Grafana/Splunk), lead root-cause analysis, and refine our operational runbooks.
• Innovate: Evaluate and prototype next-gen identity and secrets technologies (e.g., OpenBao, Infisical) to ensure we stay ahead of industry standards.

What You Bring to the Team

• Foundational Experience: 8+ years in DevOps, SRE, or Cloud Engineering, supported by a degree in a technical field or practical experience.
• Secrets & Cryptography: Hands-on experience deploying and leading HashiCorp Vault at scale (Raft, replication, disaster recovery).
• Cloud Proficiency: Deep knowledge of AWS (EKS, IAM, KMS, VPC) and Kubernetes orchestration.
• IaC Mastery: Experience building modular, reusable Terraform/Terragrunt environments and robust CI/CD pipelines (GitLab, GitHub Actions).
• Automation: Proficiency in Go, Python, or Bash to compose operational tooling and API-driven automation.
• Operational Mindset: Experience supporting 24x7 production environments and leading incident responses with a blameless, growth-oriented perspective.

Why You'll Stand Out

• Compliance Expertise: Experience operating in regulated environments like FedRAMP, SOC 2, or ISO 27001.
• Security Integration: Knowledge of HSMs (CloudHSM, Thales Luna) and certificate management (ACME, EST, SCEP).
• Policy-as-Code: Familiarity with OPA, Kyverno, or HashiCorp Sentinel.
• Data & Database Ops: Exposure to enterprise database replication or complex middleware tiers.