Secrets Management Architect - Vault & IAM Leader

Westpac Bank; Sydney; On-site; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Mortgage rate offers for employees

Flexible work arrangements

Culture, Lifestyle and Wellbeing leave

Job summary

Westpac Bank is seeking a Principal Engineer - Secrets Management to lead the bank's enterprise secrets management strategy across on-premises, cloud and DevOps environments. You will drive Vault-based services, machine identities, certificates, keys and API secrets, while reducing cyber risk and enabling secure digital transformation.

You will champion automation, improve resilience and observability, and embed secure-by-default patterns across AWS, Azure, Kubernetes and CI/CD pipelines,

Qualifications

• Deep expertise in Vault, Secrets Management, PAM, and IAM.
• Proven experience delivering and operationalising enterprise-scale Secrets Management programs.
• Hands-on security engineering across infrastructure, cloud, and DevSecOps.
• Experience managing machine identities and non-human identity security.
• Knowledge of PKI, certificate management, encryption keys and API secrets.
• Exposure to AWS, Azure, CI/CD, automation and platform engineering.
• Strong stakeholder engagement to drive security uplift and transformation.

Responsibilities

• Define the enterprise secrets management strategy and technical direction.
• Lead the design, engineering and adoption of secure, scalable solutions.
• Own Vault evolution as an enterprise security service and drive broad adoption.
• Identify, scan and eliminate unmanaged secrets from repos, apps and infra.
• Champion automation, resilience and observability and secure-by-default patterns.
• Provide technical leadership across governance, standards and control uplift.

Skills

Vault expertise

Secrets management

PAM

IAM

Security engineering

Machine identities

PKI

Cloud experience

CI/CD

Stakeholder engagement

Job description

Westpac Bank is seeking a Principal Engineer - Secrets Management to lead the bank's enterprise secrets management strategy across on-premises, cloud and DevOps environments. You will drive Vault-based services, machine identities, certificates, keys and API secrets, while reducing cyber risk and enabling secure digital transformation.

You will champion automation, improve resilience and observability, and embed secure-by-default patterns across AWS, Azure, Kubernetes and CI/CD pipelines,