Principal Vault & Secrets Management Architect

Westpac Group; Sydney; Hybrid; AUD 180,000 - 260,000; Full time

Benefits offered by this job

Flexible work arrangements

Learning & development opportunities

Volunteer initiatives

Generous mortgage rates for employees

Job summary

Westpac Group in Sydney is seeking a Principal Engineer – Secrets Management to lead the bank's enterprise secrets strategy across on-prem, cloud, and DevOps environments. You will define technical direction for Vault, machine identities, service accounts, and API secrets, driving secure, scalable solutions to reduce cyber risk.

You will champion automation, security-by-default patterns, and secure lifecycle management, while partnering with Identity, Privileged Access, Cloud and Platform

Qualifications

• Deep expertise in Vault, Secrets Management, PAM and IAM.
• Proven experience delivering enterprise-scale Secrets Management programs.
• Hands-on security engineering across infra, cloud, or DevSecOps.
• Experience managing machine identities and non-human identities.
• Knowledge of PKI, certificate management and credential lifecycles.
• Exposure to AWS, Azure, CI/CD and platform engineering.
• Strong stakeholder engagement to drive security uplift.

Responsibilities

• Lead and define the enterprise secrets management strategy across on-prem, cloud and DevOps.
• Own evolution of Vault as an enterprise security service and drive broad adoption.
• Drive automation, resilience, observability and secure-by-default patterns.
• Partner with Identity, Privileged Access, Cloud and Platform Engineering teams to uplift governance and standards.

Skills

Vault

Secrets Management

PAM

IAM

Security Engineering

Machine Identities

PKI

AWS

Azure

CI/CD

Stakeholder Engagement

Job description

Westpac Group in Sydney is seeking a Principal Engineer – Secrets Management to lead the bank's enterprise secrets strategy across on-prem, cloud, and DevOps environments. You will define technical direction for Vault, machine identities, service accounts, and API secrets, driving secure, scalable solutions to reduce cyber risk.

You will champion automation, security-by-default patterns, and secure lifecycle management, while partnering with Identity, Privileged Access, Cloud and Platform