Principal Engineer - Secrets Management

Westpac; Sydney; Sur place; AUD 180 000 - 260 000; Plein temps

Avantages offerts par ce poste

Flexible work arrangements

Learning & development opportunities

Volunteer initiatives

Generous mortgage rates for employees

Résumé du poste

Westpac Group in Sydney is seeking a Principal Engineer – Secrets Management to lead the bank's enterprise secrets strategy across on-prem, cloud, and DevOps environments. You will define technical direction for Vault, machine identities, service accounts, and API secrets, driving secure, scalable solutions to reduce cyber risk.

You will champion automation, security-by-default patterns, and secure lifecycle management, while partnering with Identity, Privileged Access, Cloud and Platform

Qualifications

• Deep expertise in Vault, Secrets Management, PAM and IAM.
• Proven experience delivering enterprise-scale Secrets Management programs.
• Hands-on security engineering across infra, cloud, or DevSecOps.
• Experience managing machine identities and non-human identities.
• Knowledge of PKI, certificate management and credential lifecycles.
• Exposure to AWS, Azure, CI/CD and platform engineering.
• Strong stakeholder engagement to drive security uplift.

Responsabilités

• Lead and define the enterprise secrets management strategy across on-prem, cloud and DevOps.
• Own evolution of Vault as an enterprise security service and drive broad adoption.
• Drive automation, resilience, observability and secure-by-default patterns.
• Partner with Identity, Privileged Access, Cloud and Platform Engineering teams to uplift governance and standards.

Connaissances

Vault

Secrets Management

PAM

IAM

Security Engineering

Machine Identities

PKI

AWS

Azure

CI/CD

Stakeholder Engagement

Description du poste

Create your best future and join as a Principal Engineer – Secrets Management

What’s the role?

As a Principal Engineer, you will lead the Bank’s enterprise secrets management strategy, driving the design, engineering and adoption of secure, scalable and automated solutions that protect critical credentials across on-premises, cloud and DevOps environments. You will define the technical direction for enterprise secrets management services, including Vault, machine identities, service accounts, certificates, keys and API secrets, while reducing cyber risk and enabling secure digital transformation across the organisation.

Additionally, you'll own the evolution of Vault as an enterprise security service, expand adoption across technology platforms, and drive initiatives to identify, scan and eliminate unmanaged secrets from repositories, applications and infrastructure. You will champion automation, improve resilience and observability, establish secure-by-default patterns, and embed secrets management into modern engineering practices across AWS, Azure, Kubernetes, OpenShift and CI/CD ecosystems.

You will provide technical leadership across governance, standards and control uplift, partnering closely with Identity, Privileged Access, Cloud and Platform Engineering teams. You will drive lifecycle automation, strengthen non-human identity security, and ensure alignment with regulatory obligations and enterprise security objectives.

What do I need?

• Deep expertise in Vault, Secrets Management, Privileged Access Management (PAM), and Identity & Access Management (IAM).
• Proven experience delivering and operationalising enterprise-scale Secrets Management programs within large and complex environments.
• Strong hands-on security engineering experience across infrastructure, platforms, cloud, or DevSecOps environments.
• Experience managing machine identities, service accounts, and non-human identity security.
• Knowledge of PKI, certificate management, encryption keys, API secrets, and credential lifecycle management.
• Exposure to AWS, Azure, CI/CD pipelines, automation, and platform engineering.
• Strong stakeholder engagement skills with the ability to drive security uplift and large-scale transformation initiatives.

We’re obsessed with becoming our customers #1 banking partner for life and we’re looking for people who are passionate about helping us achieve that goal. In return we’re committed to making Westpac the best place to work in the country. Here are just a few of the ways we’re already doing that:

• Special offers on banking products and discounts from top brands, including generous employee-only mortgage rates!
• Flexible work arrangements to help you achieve a greater work life balance, and a variety of leave options including Culture, Lifestyle and Wellbeing leave.
• Tailored learning and development opportunities to help you grow your career within the bank.
• Lots of opportunities to give back to the Community by getting involved in our many volunteering initiatives

Create your future today

We’re all about creating a supportive and inclusive community. We welcome everyone no matter your age, gender, background, or abilities. We also provide additional support to welcome our veterans, Indigenous Australians and neurodiverse community.

If you need any adjustments during the recruitment process, you can find more information and contact details on our FAQs and how to contact us page , under the Diversity, sustainability and flexibility section.

#LI - Hybrid

Job Info

• Job Identification 72672
• Job Category Information & Cyber Security