Senior IT Security Engineer/Solution Architect

emagine Polska; Kraków, Wrocław; Hybrid; PLN 255,000 - 363,000; Full time

Job summary

emagine Polska is seeking a Senior IT Security Engineer/Solution Architect to provide specialist expertise in IAM Secret Credential Management for Cyber Operations. The role supports the Expand Secure Credential Management programme with hybrid work options.

The project operates in a banking context, requires strong communication skills, and involves AWS, Vault, and security controls across IAM, SIEM, and ITSM environments. English language is used for project collaboration.

Qualifications

• 6–10 years of experience in technical architecture.
• Hands-on experience with HashiCorp Vault and AWS Secrets Manager.
• Advanced understanding of OAuth.
• Strong communication skills engaging diverse audiences.
• Experience in software lifecycle and application development.
• Proficient user of Confluence.

Responsibilities

• Assess the current credential management environment.
• Define the target state architecture and requirements.
• Design controls and implementation approaches for AWS Secrets Manager.
• Develop migration plans for AWS-native workloads.
• Lead the full lifecycle of the platform, including discovery and inventory, proof of concept, and enterprise rollout.
• Collaborate with IAM Platform, Operations, and other key stakeholders.
• Produce Solution Design Documentation and obtain necessary approvals.
• Establish IAM/workload identity and least-privilege patterns.
• Design integration with IAM, CMDB, SIEM, CloudTrail, and ITSM/GRC.
• Create operational documentation and knowledge-sharing materials.

Skills

Technical architecture

HashiCorp Vault

AWS Secrets Manager

OAuth

Communication

Software lifecycle

Tools

Confluence

Job description

Summary:

The Senior IT Security Engineer/Solution Architect role focuses on providing specialist expertise in IAM Secret Credential Management for Cyber Operations within Security, Risk & Control, particularly in support of the Expand Secure Credential Management programme.

PROJECT INFORMATION:

Industry: Banking

Working model: Hybrid (3 days per week from the office) or Remote from EU

Project language: English

Project length: 12 months + possible prolongation

Start: ASAP

Budget: up to 51 euro

Responsibilities:

• Assess the current credential management environment.
• Define the target state architecture and requirements.
• Design controls and implementation approaches for AWS Secrets Manager.
• Develop migration plans for AWS-native workloads.
• Lead the full lifecycle of the platform, including discovery and inventory, proof of concept, and enterprise rollout.
• Collaborate with IAM Platform, Operations, and other key stakeholders.
• Produce Solution Design Documentation and obtain necessary approvals.
• Establish IAM/workload identity and least-privilege patterns.
• Design integration with IAM, CMDB, SIEM, CloudTrail, and ITSM/GRC.
• Create operational documentation and knowledge-sharing materials.

Must Haves:

• 6-10 years of experience in technical architecture.
• Extensive hands-on experience with HashiCorp Vault and AWS Secrets Manager.
• Advanced understanding of OAuth.
• Strong communication skills capable of engaging with diverse audiences.
• Experience in software lifecycle and application development.
• Proficient user of Confluence.

Nice to Haves:

• Experience in financial services or highly regulated environments.
• Familiarity with Privilege Access Management and other credential management tools.
• Experience in designing and implementing enterprise IAM Secrets Credential management.
• Background in delivering security transformations in complex environments.
• Understanding of NIST, CIS Controls, ISO 27001, and PCI DSS standards.