IAM Security Engineer (Hashicorp), Global Financial Institution

Kerry Consulting; Singapore; Sur place; SGD 140 000 - 210 000; Plein temps

Résumé du poste

Global Financial Institution in Singapore seeks a senior security engineer to build and scale an enterprise secrets-management capability centered on HashiCorp Vault, covering architecture, security hardening, automation and integration across cloud, Kubernetes, applications and delivery pipelines.

You will establish reusable approaches for workload authentication, credential issuance and rotation, while helping development teams move away from embedded or long-lived credentials; the role is

Qualifications

• At least 3 years of substantial hands-on experience with HashiCorp Vault in production environments, ideally including Vault Enterprise and involvement in designing or delivering a new implementation at organisational scale.
• Strong practical knowledge of Vault architecture, authentication mechanisms, secrets engines, access policies, namespaces, high availability, disaster recovery, dynamic credentials, PKI and platform security.
• Demonstrated engineering experience with Terraform and Ansible, together with Kubernetes and at least one major public-cloud platform such as AWS, Azure or GCP.
• Strong DevOps and automation background encompassing Git-based workflows, CI/CD, APIs and scripting, with experience integrating secrets management securely into application and infrastructure delivery processes.
• Good understanding of workload and non-human identity security, including short-lived credentials, least-privilege access and automated credential lifecycle management; exposure to AI-assisted engineering or securing autonomous/AI workloads would be advantageous.

Responsabilités

• Develop and scale an enterprise secrets-management capability centered on HashiCorp Vault, covering architecture, security hardening, automation and integration across cloud, Kubernetes, applications and pipelines.
• Establish reusable approaches for workload authentication, credential issuance and rotation, and help development teams migrate away from embedded or long-lived credentials.
• Implement Infrastructure-as-Code, platform reliability and secure machine-to-machine authentication to support automated and AI-enabled workloads.

Connaissances

Security engineering

Automation

DevOps

Scripting

Workload identity

Outils

HashiCorp Vault

Terraform

Ansible

Kubernetes

AWS

Azure

GCP

Git

Description du poste

Our client is a leading Global Financial Institution with a significant technology and cybersecurity presence in Singapore. As part of continued investment in identity security and secure infrastructure, the organisation is strengthening its capabilities around machine identities, privileged credentials and enterprise secrets management. This is a senior individual-contributor opportunity for an experienced security engineer who enjoys building secure platforms, automating controls and partnering with engineering teams across a complex technology environment.

Role

You will take a key engineering role in developing and scaling an enterprise secrets-management capability, with HashiCorp Vault forming a central part of the technology stack. The position covers architecture, implementation, security hardening, automation and integration across cloud, Kubernetes, applications and delivery pipelines. You will establish reusable approaches for workload authentication, credential issuance and rotation, while helping development teams transition away from embedded or long-lived credentials. The role is highly hands-on and will also involve Infrastructure-as-Code, platform reliability, secure machine-to-machine authentication, and the development of appropriate identity controls for increasingly automated and AI-enabled workloads.

Requirements

• At least 3 years of substantial hands-on experience with HashiCorp Vault in production environments, ideally including Vault Enterprise and involvement in designing or delivering a new implementation at organisational scale.
• Strong practical knowledge of Vault architecture, authentication mechanisms, secrets engines, access policies, namespaces, high availability, disaster recovery, dynamic credentials, PKI and platform security.
• Demonstrated engineering experience with Terraform and Ansible, together with Kubernetes and at least one major public-cloud platform such as AWS, Azure or GCP.
• Strong DevOps and automation background encompassing Git-based workflows, CI/CD, APIs and scripting, with experience integrating secrets management securely into application and infrastructure delivery processes.
• Good understanding of workload and non-human identity security, including short-lived credentials, least-privilege access and automated credential lifecycle management; exposure to AI-assisted engineering or securing autonomous/AI workloads would be advantageous.