Principal Engineer - Secrets Management

Westpac Bank; Sydney; On-site; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Mortgage rate offers for employees

Flexible work arrangements

Culture, Lifestyle and Wellbeing leave

Job summary

Westpac Bank is seeking a Principal Engineer - Secrets Management to lead the bank's enterprise secrets management strategy across on-premises, cloud and DevOps environments. You will drive Vault-based services, machine identities, certificates, keys and API secrets, while reducing cyber risk and enabling secure digital transformation.

You will champion automation, improve resilience and observability, and embed secure-by-default patterns across AWS, Azure, Kubernetes and CI/CD pipelines,

Qualifications

• Deep expertise in Vault, Secrets Management, PAM, and IAM.
• Proven experience delivering and operationalising enterprise-scale Secrets Management programs.
• Hands-on security engineering across infrastructure, cloud, and DevSecOps.
• Experience managing machine identities and non-human identity security.
• Knowledge of PKI, certificate management, encryption keys and API secrets.
• Exposure to AWS, Azure, CI/CD, automation and platform engineering.
• Strong stakeholder engagement to drive security uplift and transformation.

Responsibilities

• Define the enterprise secrets management strategy and technical direction.
• Lead the design, engineering and adoption of secure, scalable solutions.
• Own Vault evolution as an enterprise security service and drive broad adoption.
• Identify, scan and eliminate unmanaged secrets from repos, apps and infra.
• Champion automation, resilience and observability and secure-by-default patterns.
• Provide technical leadership across governance, standards and control uplift.

Skills

Vault expertise

Secrets management

PAM

IAM

Security engineering

Machine identities

PKI

Cloud experience

CI/CD

Stakeholder engagement

Job description

Create your best future and join as a Principal Engineer - Secrets Management

What's the role?

As a Principal Engineer, you will lead the Bank's enterprise secrets management strategy, driving the design, engineering and adoption of secure, scalable and automated solutions that protect critical credentials across on-premises, cloud and DevOps environments. You will define the technical direction for enterprise secrets management services, including Vault, machine identities, service accounts, certificates, keys and API secrets, while reducing cyber risk and enabling secure digital transformation across the organisation.

Additionally, you'll own the evolution of Vault as an enterprise security service, expand adoption across technology platforms, and drive initiatives to identify, scan and eliminate unmanaged secrets from repositories, applications and infrastructure. You will champion automation, improve resilience and observability, establish secure-by-default patterns, and embed secrets management into modern engineering practices across AWS, Azure, Kubernetes, OpenShift and CI/CD ecosystems.

You will provide technical leadership across governance, standards and control uplift, partnering closely with Identity, Privileged Access, Cloud and Platform Engineering teams. You will drive lifecycle automation, strengthen non-human identity security, and ensure alignment with regulatory obligations and enterprise security objectives.

What do I need?

• Deep expertise in Vault, Secrets Management, Privileged Access Management (PAM), and Identity & Access Management (IAM).
• Proven experience delivering and operationalising enterprise-scale Secrets Management programs within large and complex environments.
• Strong hands-on security engineering experience across infrastructure, platforms, cloud, or DevSecOps environments.
• Experience managing machine identities, service accounts, and non-human identity security.
• Knowledge of PKI, certificate management, encryption keys, API secrets, and credential lifecycle management.
• Exposure to AWS, Azure, CI/CD pipelines, automation, and platform engineering.
• Strong stakeholder engagement skills with the ability to drive security uplift and large-scale transformation initiatives.

We're obsessed with becoming our customers #1 banking partner for life and we're looking for people who are passionate about helping us achieve that goal. In return we're committed to making Westpac the best place to work in the country. Here are just a few of the ways we're already doing that:

• Special offers on banking products and discounts from top brands, including generous employee-only mortgage rates!
• Flexible work arrangements to help you achieve a greater work life balance, and a variety of leave options including Culture, Lifestyle and Wellbeing leave.
• Tailored learning and development opportunities to help you grow your career within the bank.
• Lots of opportunities to give back to the Community by getting involved in our many volunteering initiatives

Create your future today

We're all about creating a supportive and inclusive community. We welcome everyone no matter your age, gender, background, or abilities. We also provide additional support to welcome our veterans, Indigenous Australians and neurodiverse community.

If you need any adjustments during the recruitment process, you can find more information and contact details on our FAQs and how to contact us page, under the Diversity, sustainability and flexibility section.