IAM & Secrets Credential Architect (Hybrid/Remote EU)

emagine Polska; Kraków, Wrocław; Hybrid; PLN 255,000 - 363,000; Full time

Job summary

emagine Polska is seeking a Senior IT Security Engineer/Solution Architect to provide specialist expertise in IAM Secret Credential Management for Cyber Operations. The role supports the Expand Secure Credential Management programme with hybrid work options.

The project operates in a banking context, requires strong communication skills, and involves AWS, Vault, and security controls across IAM, SIEM, and ITSM environments. English language is used for project collaboration.

Qualifications

• 6–10 years of experience in technical architecture.
• Hands-on experience with HashiCorp Vault and AWS Secrets Manager.
• Advanced understanding of OAuth.
• Strong communication skills engaging diverse audiences.
• Experience in software lifecycle and application development.
• Proficient user of Confluence.

Responsibilities

• Assess the current credential management environment.
• Define the target state architecture and requirements.
• Design controls and implementation approaches for AWS Secrets Manager.
• Develop migration plans for AWS-native workloads.
• Lead the full lifecycle of the platform, including discovery and inventory, proof of concept, and enterprise rollout.
• Collaborate with IAM Platform, Operations, and other key stakeholders.
• Produce Solution Design Documentation and obtain necessary approvals.
• Establish IAM/workload identity and least-privilege patterns.
• Design integration with IAM, CMDB, SIEM, CloudTrail, and ITSM/GRC.
• Create operational documentation and knowledge-sharing materials.

Skills

Technical architecture

HashiCorp Vault

AWS Secrets Manager

OAuth

Communication

Software lifecycle

Tools

Confluence

Job description

emagine Polska is seeking a Senior IT Security Engineer/Solution Architect to provide specialist expertise in IAM Secret Credential Management for Cyber Operations. The role supports the Expand Secure Credential Management programme with hybrid work options.

The project operates in a banking context, requires strong communication skills, and involves AWS, Vault, and security controls across IAM, SIEM, and ITSM environments. English language is used for project collaboration.