IAM Secrets Architect | Vault & AWS Secrets Manager

emagine Group; Polska; Hybrid; PLN 255,000 - 363,000; Full time

Job summary

emagine Group is seeking a Senior IT Security Engineer/Solution Architect to lead IAM Secrets Credential Management for Cyber Operations within a hybrid EU setting. The role emphasizes design, governance, and migration planning for secure credential handling using AWS Secrets Manager and HashiCorp Vault.

The candidate should have extensive architectural experience, strong communication, and a track record of delivering security transformations in complex environments.

Qualifications

• 6–10 years of technical architecture experience.
• Hands-on with Vault and AWS Secrets Manager.
• Advanced understanding of OAuth.
• Strong communication with diverse audiences.
• Experience in software lifecycle and application development.

Responsibilities

• Assess the current credential management environment.
• Define the target state architecture and requirements.
• Design controls and implementation approaches for AWS Secrets Manager.
• Develop migration plans for AWS-native workloads.
• Lead the full lifecycle of the platform, including discovery and inventory, proof of concept, and enterprise rollout.
• Collaborate with IAM Platform, Operations, and other key stakeholders.
• Produce Solution Design Documentation and obtain necessary approvals.
• Establish IAM/workload identity and least-privilege patterns.
• Design integration with IAM, CMDB, SIEM, CloudTrail, and ITSM/GRC.
• Create operational documentation and knowledge-sharing materials.

Skills

OAuth

Communication skills

Security architecture

Cloud security

Software lifecycle

Tools

HashiCorp Vault

AWS Secrets Manager

Confluence

Job description

emagine Group is seeking a Senior IT Security Engineer/Solution Architect to lead IAM Secrets Credential Management for Cyber Operations within a hybrid EU setting. The role emphasizes design, governance, and migration planning for secure credential handling using AWS Secrets Manager and HashiCorp Vault.

The candidate should have extensive architectural experience, strong communication, and a track record of delivering security transformations in complex environments.