Update the org-wide default to private and create a sharing rule for the role of recruiting manager.

Create a permission set containing the salary record type and assign it to the appropriate users.

Remove "create" permission for the salary applicant object for everyone except the manager and VP.

Configure the hourly record type as the default and instruct non-management users to accept the default record type.