Systems Engineer III

Title: SOX Engineer

Department: Platform Infrastructure Engineering

Location: Hyderabad

Role/Department Description:

FactSet is seeking an experienced engineer to drive engagement and automation. The ideal candidate is passionate about automation and cryptography and will work with development teams, infrastructure teams, and clients, to implement best practice workflows.

Responsibilities:

• Implement and manage HashiCorp Vault for storing and rotating credentials used by Windows servers and enterprise applications.
• Automate service account creation, onboarding, and rotation through Vault’s API and Windows automation tools (e.g., PowerShell, BigFix, or SCCM).
• Collaborate with Active Directory, IAM, and Security teams to align Vault policies with enterprise standards.
• Configure and maintain Vault authentication methods (LDAP, AD, or AppRole) for Windows-based workloads.
• Create and maintain Vault policies (ACLs) to ensure least privilege access to secrets.
• Integrate Vault with automation pipelines for seamless secret retrieval (e.g., CI/CD, patching scripts, or service restarts).
• Support compliance and audit reporting by tracking credential rotation, usage, and policy adherence.
• Partner with platform engineers to ensure Vault agents or plugins are properly deployed and monitored on Windows servers.
• Participate in incident response and remediation involving credential leaks or access misconfigurations.
• Participation in an on-call rotation for occasional after-hours services and support

Required Skills

• 3–7 years in Windows infrastructure or systems engineering.
• Strong understanding of Active Directory, Group Policy, and Windows authentication.
• Hands-on experience with PowerShell scripting for automation and API integration.
• Familiarity with HashiCorp Vault concepts — secrets engines, auth methods, tokens, policies.
• Knowledge of identity lifecycle management, service accounts, and password rotation best practices.

Preferred:

• Experience implementing Vault AD Secrets Engine or Dynamic Secrets for Windows.
• Exposure to CI/CD tools, DevOps, or infrastructure as code (Terraform, Ansible).
• Understanding of network security, TLS certificates, and PKI-based authentication.
• Experience with compliance frameworks (CIS, SOX, ISO, or internal audit standards).

Tools and Capabilities:

• Microsoft Active Directory Certificate Services
• AWS Certificate Manager
• Hashicorp Vault

What's In It For You

At FactSet, our people are our greatest asset, and our culture is our biggest competitive advantage. Being a FactSetter means:

• The opportunity to join an S&P 500 company with over 45 years of sustainable growth powered by the entrepreneurial spirit of a start-up.

• Support for your total well-being. This includes health, life, and disability insurance, as well as retirement savings plans and a discounted employee stock purchase program, plus paid time off for holidays, family leave, and company-wide wellness days.

• Flexible work accommodations. We value work/life harmony and offer our employees a range of accommodations to help them achieve success both at work and in their personal lives.

• A global community dedicated to volunteerism and sustainability, where collaboration is always encouraged, and individuality drives solutions.

• Career progression planning with dedicated time each month for learning and development.

• Business Resource Groups open to all employees that serve as a catalyst for connection, growth, and belonging.

Salary is just one component of our compensation package and is based on several factors including but not limited to education, work experience, and certifications.