AVP, Non-Human Identity & Secrets Security Engineer

DBS Bank Ltd; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

DBS Bank Ltd. is seeking an experienced Security Engineer with a strong application development background to design, build, and implement secure IAM solutions focused on secrets management.

You will drive secure integration of applications and platforms and provide operational support for highly resilient systems. The role requires hands-on experience in secrets management, PKI, OAuth/OIDC, TLS/SSL, and service-to-service authentication, working with Java and scripting languages.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Engineering or equivalent practical experience.
• Minimum 7 years of relevant experience in application security, security engineering, software development, or IAM, with at least 3 years of hands-on experience in secrets management solution, machine/non-human identity, PKI or service-to-service authentication.
• Strong software engineering capability in Java and at least one scripting or automation language (e.g., Python, JavaScript/Node.js, Go, or shell scripting) for security tool development and automation.
• Strong hands-on development and implementation experience with enterprise secrets management solutions including production deployment, configuration, operations, troubleshooting, and lifecycle management for applications.
• Experience designing, developing, and operating highly resilient application systems, including clustering, failover, backup and restore, disaster recovery, observability, capacity management, and service reliability practices.
• Practical experience with secure API design and development, cryptography concepts, TLS/SSL, certificates, key management, SSH key management, token-based authentication, OAuth/OIDC, JWT, SAML, or workload identity patterns.
• Experience with CI/CD pipelines, Infrastructure as Code for application deployments, container platforms (e.g., Kubernetes, Docker), and cloud services across AWS, Azure, or GCP in a development and security context.
• Proven experience in requirements gathering, secure solution design, development, integration testing, performance testing, change implementation, and production support for enterprise application technology platforms.

Responsibilities

• Design, build, test, operate, and continuously improve enterprise security solutions for IAM involving secrets management across various deployment environments.
• Engineer and operate highly available, resilient, and secure application-focused platforms for secrets management, workload identity and service-to-service authentication.
• Configure, manage, and support secrets management solutions and related technologies for applications, including authentication methods, secret engines, policy management, audit logging, replication, backup, disaster recovery, and platform upgrades.
• Integrate applications, APIs, microservices, batch workloads, containers, CI/CD pipelines, and cloud-native platforms with IAM services using secure, automated patterns.
• Develop robust automation, reusable tooling, APIs, scripts, and Infrastructure as Code to reduce manual effort and accelerate secure onboarding.
• Provide operational support for critical security platforms, including monitoring, incident response, troubleshooting, escalation management, root-cause analysis, and preventive actions.
• Partner with various teams to embed robust application security and IAM controls into SDLC and delivery pipelines.
• Maintain runbooks, architecture diagrams, service metrics, and knowledge articles for audit readiness and sustainable operations.

Skills

IAM

Java

Security automation

CI/CD

Cloud platforms

Education

Bachelor's degree in Computer Science

Tools

Kubernetes

Docker

PKI

TLS/SSL

OAuth/OIDC

SAML

Secrets management

Job description

DBS Bank Ltd. is seeking an experienced Security Engineer with a strong application development background to design, build, and implement secure IAM solutions focused on secrets management.

You will drive secure integration of applications and platforms and provide operational support for highly resilient systems. The role requires hands-on experience in secrets management, PKI, OAuth/OIDC, TLS/SSL, and service-to-service authentication, working with Java and scripting languages.