Senior Platform Identity Engineer (Zero-Trust & Secrets)

FIRMUS METAL INTERNATIONAL PTE. LTD.; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

FIRMUS METAL INTERNATIONAL PTE. LTD. seeks a Principal Platform Identity Engineer to design and operate the trust plane of the AI estate, provisioning identity, certificates and secrets as code within CI/CD.

You will own just-in-time privileged access, rotations, audit trails, and dual-control custody for production cryptographic material, collaborating with Platform Security and Service Delivery teams in a 24/7 production environment.

Qualifications

• Design, build and operate identity and access management platforms with SSO integrations.
• Manage certificate lifecycles and internal PKI for production estates.
• Operate secrets management with rotation, policy and audit trails.
• Implement privileged access management with just-in-time elevation and approvals.
• Apply zero-trust concepts to a multi-tenant platform and CI/CD pipelines.
• Embed identity and secrets into IaC and automation tooling.

Responsibilities

• Design, build and operate the workforce and service identity platform with SSO integration.
• Operate internal certificate authority and secret management with rotation and audit.
• Automate provisioning of identity, certs and secrets via code in CI/CD pipelines.
• Own the privileged access model with just-in-time elevation and break-glass controls.
• Enforce least-privilege access and report compliance to Security and Platform Engineering.
• Manage custody of cryptographic material under dual control with auditable records.
• Provide expert troubleshooting for identity, certificate and secrets faults in a 24/7 environment.

Skills

IAM platforms

SSO integration

Certificate lifecycle

Secrets management

Privileged access mgmt

Zero-trust architecture

CI/CD & IaC

Scripting in Python/Go/Bash

24/7 production escalation

Internal PKI

Tools

HashiCorp Vault

step-ca

OpenBao

authentik

Keycloak

Entra ID

Job description

FIRMUS METAL INTERNATIONAL PTE. LTD. seeks a Principal Platform Identity Engineer to design and operate the trust plane of the AI estate, provisioning identity, certificates and secrets as code within CI/CD.

You will own just-in-time privileged access, rotations, audit trails, and dual-control custody for production cryptographic material, collaborating with Platform Security and Service Delivery teams in a 24/7 production environment.