Senior IT Security Engineer/Solution Architect

emagine Group; Polska; Hybrid; PLN 255,000 - 363,000; Full time

Job summary

emagine Group is seeking a Senior IT Security Engineer/Solution Architect to lead IAM Secrets Credential Management for Cyber Operations within a hybrid EU setting. The role emphasizes design, governance, and migration planning for secure credential handling using AWS Secrets Manager and HashiCorp Vault.

The candidate should have extensive architectural experience, strong communication, and a track record of delivering security transformations in complex environments.

Qualifications

• 6–10 years of technical architecture experience.
• Hands-on with Vault and AWS Secrets Manager.
• Advanced understanding of OAuth.
• Strong communication with diverse audiences.
• Experience in software lifecycle and application development.

Responsibilities

• Assess the current credential management environment.
• Define the target state architecture and requirements.
• Design controls and implementation approaches for AWS Secrets Manager.
• Develop migration plans for AWS-native workloads.
• Lead the full lifecycle of the platform, including discovery and inventory, proof of concept, and enterprise rollout.
• Collaborate with IAM Platform, Operations, and other key stakeholders.
• Produce Solution Design Documentation and obtain necessary approvals.
• Establish IAM/workload identity and least-privilege patterns.
• Design integration with IAM, CMDB, SIEM, CloudTrail, and ITSM/GRC.
• Create operational documentation and knowledge-sharing materials.

Skills

OAuth

Communication skills

Security architecture

Cloud security

Software lifecycle

Tools

HashiCorp Vault

AWS Secrets Manager

Confluence

Job description

Summary: The Senior IT Security Engineer/Solution Architect role focuses on providing specialist expertise in IAM Secret Credential Management for Cyber Operations within Security, Risk & Control, particularly in support of the Expand Secure Credential Management programme.

PROJECT INFORMATION

Industry: Banking
Working model: Hybrid (3 days per week from the office) or Remote from EU
Project language: English
Project length: 12 month + possible prolongation
Start: ASAP
Budget: up to 51 euro

Responsibilities

• Assess the current credential management environment.
• Define the target state architecture and requirements.
• Design controls and implementation approaches for AWS Secrets Manager.
• Develop migration plans for AWS-native workloads.
• Lead the full lifecycle of the platform, including discovery and inventory, proof of concept, and enterprise rollout.
• Collaborate with IAM Platform, Operations, and other key stakeholders.
• Produce Solution Design Documentation and obtain necessary approvals.
• Establish IAM/workload identity and least-privilege patterns.
• Design integration with IAM, CMDB, SIEM, CloudTrail, and ITSM/GRC.
• Create operational documentation and knowledge-sharing materials.

Must Haves

• 6-10 years of experience in technical architecture.
• Extensive hands-on experience with HashiCorp Vault and AWS Secrets Manager.
• Advanced understanding of OAuth.
• Strong communication skills capable of engaging with diverse audiences.
• Experience in software lifecycle and application development.
• Proficient user of Confluence.

Nice to Haves

• Experience in financial services or highly regulated environments.
• Familiarity with Privilege Access Management and other credential management tools.
• Experience in designing and implementing enterprise IAM Secrets Credential management.
• Background in delivering security transformations in complex environments.
• Understanding of NIST, CIS Controls, ISO 27001, and PCI DSS standards.