Senior Vault & Secrets Platform Engineer

Kerry Consulting; Singapore; On-site; SGD 140,000 - 210,000; Full time

Job summary

Global Financial Institution in Singapore seeks a senior security engineer to build and scale an enterprise secrets-management capability centered on HashiCorp Vault, covering architecture, security hardening, automation and integration across cloud, Kubernetes, applications and delivery pipelines.

You will establish reusable approaches for workload authentication, credential issuance and rotation, while helping development teams move away from embedded or long-lived credentials; the role is

Qualifications

• At least 3 years of substantial hands-on experience with HashiCorp Vault in production environments, ideally including Vault Enterprise and involvement in designing or delivering a new implementation at organisational scale.
• Strong practical knowledge of Vault architecture, authentication mechanisms, secrets engines, access policies, namespaces, high availability, disaster recovery, dynamic credentials, PKI and platform security.
• Demonstrated engineering experience with Terraform and Ansible, together with Kubernetes and at least one major public-cloud platform such as AWS, Azure or GCP.
• Strong DevOps and automation background encompassing Git-based workflows, CI/CD, APIs and scripting, with experience integrating secrets management securely into application and infrastructure delivery processes.
• Good understanding of workload and non-human identity security, including short-lived credentials, least-privilege access and automated credential lifecycle management; exposure to AI-assisted engineering or securing autonomous/AI workloads would be advantageous.

Responsibilities

• Develop and scale an enterprise secrets-management capability centered on HashiCorp Vault, covering architecture, security hardening, automation and integration across cloud, Kubernetes, applications and pipelines.
• Establish reusable approaches for workload authentication, credential issuance and rotation, and help development teams migrate away from embedded or long-lived credentials.
• Implement Infrastructure-as-Code, platform reliability and secure machine-to-machine authentication to support automated and AI-enabled workloads.

Skills

Security engineering

Automation

DevOps

Scripting

Workload identity

Tools

HashiCorp Vault

Terraform

Ansible

Kubernetes

AWS

Azure

GCP

Git

Job description

Global Financial Institution in Singapore seeks a senior security engineer to build and scale an enterprise secrets-management capability centered on HashiCorp Vault, covering architecture, security hardening, automation and integration across cloud, Kubernetes, applications and delivery pipelines.

You will establish reusable approaches for workload authentication, credential issuance and rotation, while helping development teams move away from embedded or long-lived credentials; the role is