Principal Infrastructure Engineer, Anaplan

• You have hands-on expertise in designing, implementing, and operating HashiCorp Vault in large-scale production environments
• Proven experience with multi-region deployments on public cloud platforms, preferably AWS. Experience with GCP and Azure is also highly valuable
• Proficient with Infrastructure as Code (IaC) and Terraform
• Knowledge of modern authentication and authorisation mechanisms (e.g., OIDC, SAML, JWT)
• Experience managing Public Key Infrastructure (PKI) and certificate lifecycles
• Experience with observability tooling such as Grafana, Prometheus, and Loki
• Proficient with Kubernetes and managed Kubernetes platforms such as EKS, GKS, and AKS
• Experience with Kubernetes tooling such as Helm and Argo CD
• You have a quality-first mindset with demonstrable experience in creating and automating testing strategies for critical infrastructure
• You are happy to write and maintain clear documentation for other teams
• You have excellent communication skills, with a proven ability to influence technical direction and mentor both junior and senior engineers

Desirable

• Anaplan is looking for a Principal Infrastructure Engineer to lead the design and build of a new, multi-region HashiCorp Vault platform
• This is a pivotal role where you will serve as our Subject Matter Expert (SME), shaping the future of secrets management and governance for a platform that supports hundreds of engineers and top-flight companies around the world
• Lead the architecture, design, and implementation of a new, multi-region HashiCorp Vault platform on public cloud
• Take ownership of the solution architecture, creating and maintaining high-quality design documents and Architecture Decision Records (ADRs)
• Ensure platform resilience by developing and testing robust strategies for performance, Disaster Recovery (DR), and High Availability (HA)
• Act as the primary SME for the organisation on all aspects of Vault and modern secrets management, actively championing and evangelising best practices
• Collaborate with and influence stakeholders, platform teams, and software engineers to ensure the smooth and secure integration of their services with the Vault ecosystem
• Partner with Security to define the control requirements for the Vault platform (policy standards, privileged access, audit/evidence, compliance needs) and ensure designs meet those requirements
• Lead regular security design reviews for Vault architecture decisions (authn/authz, policy model, namespaces/tenancy, seal strategy with KMS/HSM, audit logging) and drive alignment/sign-off with Security
• Establish joint operating processes with Security for incident response and investigations, including break-glass access, audit log access patterns, and post-incident remediation
• Coach and mentor other engineers on security best practices and the adoption of the new secrets management platform