Design Engineer - HashiCorp Vault/Identity & Access Management (IAM)

Job Title: Design Engineer - HashiCorp Vault/Identity & Access Management (IAM)

Location: Sheffield, UK - Hybrid (2 days per week onsite)
Contract Type: Contract
Day Rate: Up to £550 per day
Sector: Banking/Financial Services

Job Overview

We are seeking an experienced Design Engineer with strong expertise in Cybersecurity, Identity & Access Management (IAM) and HashiCorp Vault to join a major financial services transformation programme.

You will be responsible for managing end-to-end solution design, producing high-level architecture designs and ensuring solutions align with business requirements, security principles and enterprise architecture standards.

The successful candidate will have substantial hands-on experience with HashiCorp Vault and Terraform, alongside the ability to define secure, scalable and reusable secrets management solutions within large-scale enterprise environments.

You will also work closely with technical architects, engineers, senior stakeholders and design authorities, providing technical leadership and guidance across key programmes.

Key Responsibilities

• Lead end-to-end solution design, producing high-level architecture and technical design documentation.

• Design and implement secure HashiCorp Vault integrations and secrets management solutions.

• Develop and maintain complex Terraform modules.

• Define and influence secrets management strategies and architectural patterns.

• Design and implement workload identity frameworks within enterprise environments.

• Work across Identity & Access Management, Privileged Access Management (PAM) and federated identity.

• Identify, document and mitigate technical risks, issues and design deviations.

• Present architectural solutions and design decisions to senior stakeholders and design authorities.

• Provide technical leadership and guidance to architects, engineers and project teams.

• Ensure solutions meet security, regulatory and business requirements.

Essential Skills & Experience

HashiCorp Vault & Terraform

• 3+ years' experience working with HashiCorp Vault, ideally within on-premise environments.

• 3+ years' experience using HashiCorp Terraform.

• Proven experience designing and building complex Terraform modules.

• Strong understanding of Vault integrations, Secret Engines and authentication methods.

• Experience troubleshooting Vault integration issues and improving service efficiency.

• Experience developing reusable secrets management patterns.

Identity & Access Management/Cybersecurity

• Experience designing or implementing Workload Identity Frameworks.

• Strong understanding of Identity & Access Management (IAM).

• Experience with Privileged Access Management (PAM).

• Knowledge of federated identity and Single Sign-On (SSO).

• Understanding of authentication protocols including Kerberos, OAuth and SAML.

• Strong cybersecurity knowledge across areas such as infrastructure, network, cloud, application or data security.

Architecture & Leadership

• Experience producing high-level designs and end-to-end solution architecture.

• Ability to present technical solutions to senior stakeholders and design authorities.

• Experience working within large-scale IT transformation programmes.

• Strong understanding of enterprise and solution architecture.

• Excellent stakeholder management and communication skills.

• Experience managing technical risks, dependencies and design governance.

Desirable Qualifications & Experience

• Degree or equivalent professional experience in Cybersecurity, Computer Science or Software Engineering.

• CISSP, CISM or another recognised cybersecurity certification.

• SABSA or TOGAF certification.

• Experience within banking or financial services.

• Strong Jira and Confluence experience.

Working Arrangements

• Location: Sheffield, UK.

• Hybrid: 2 days per week working from the office.

• Day Rate: Up to £550 per day.

Interested?

If you have strong HashiCorp Vault, Terraform and IAM architecture experience and are interested in this opportunity, please apply with your latest CV.