diff --git a/.zuul.yaml b/.zuul.yaml
deleted file mode 100644
index e30e3ff..0000000
--- a/.zuul.yaml
+++ /dev/null
@@ -1,7 +0,0 @@
-- project:
-    check:
-      jobs:
-        - noop
-    gate:
-      jobs:
-        - noop
diff --git a/roles/ensure-vault/tasks/main.yaml b/roles/ensure-vault/tasks/main.yaml
new file mode 100644
index 0000000..a536d52
--- /dev/null
+++ b/roles/ensure-vault/tasks/main.yaml
@@ -0,0 +1,17 @@
+- name: Add APT signing key
+  become: true
+  ansible.builtin.apt_key:
+    url: https://apt.releases.hashicorp.com/gpg
+
+- name: Add APT repository
+  become: true
+  ansible.builtin.apt_repository:
+    repo: deb [arch=amd64] https://apt.releases.hashicorp.com {{ ansible_distribution_release }} main
+
+- name: Install Vault
+  become: true
+  ansible.builtin.apt:
+    name: vault
+
+- name: Assert that Vault is functional
+  ansible.builtin.command: vault version
diff --git a/zuul.d/jobs.yaml b/zuul.d/jobs.yaml
index 383ad69..5442190 100644
--- a/zuul.d/jobs.yaml
+++ b/zuul.d/jobs.yaml
@@ -9,3 +9,9 @@
     vars:
       role_name: ensure-hatch
       ensure_hatch_version: 1.14.0
+
+- job:
+    name: zuul-jobs-test-ensure-vault
+    parent: zuul-jobs-generic-test
+    vars:
+      role_name: ensure-vault
diff --git a/zuul.d/project.yaml b/zuul.d/project.yaml
index 6142211..23c53a9 100644
--- a/zuul.d/project.yaml
+++ b/zuul.d/project.yaml
@@ -2,6 +2,8 @@
     check:
       jobs:
         - zuul-jobs-test-ensure-hatch
+        - zuul-jobs-test-ensure-vault
     gate:
       jobs:
         - zuul-jobs-test-ensure-hatch
+        - zuul-jobs-test-ensure-vault