20 of 20 Contract Secrets Management Jobs in London

changes almost every assumption you can normally make about connectivity and tooling. Security by design. Systems are under accreditation scrutiny, so hardening, network policy, secrets management and identity are design inputs rather than afterthoughts. WHERE YOU WOULD BE WORKING A venture-backed UK scale-up building AI platforms … incident response across distributed clusters using Prometheus, Grafana and Loki. Harden systems and embed the security controls needed for accreditation, covering network policy, secrets management and identity, and support deployments into restricted, disconnected and high-classification networks. WHAT YOU WILL NEED Strong Google Cloud experience, GKE in particular. ...

software delivery. The role will involve embedding security practices across the DevOps lifecycle, supporting CI/CD platforms and implementing solutions for identity, access, secrets and certificate management. The successful candidate will have experience working with enterprise security controls and DevSecOps practices, alongside strong technical capability across automation … experience with security technologies and practices, including IAM, PAM, vulnerability/scanning solutions and security controls. Practical experience with HashiCorp Vault or equivalent enterprise secrets management technologies. Strong knowledge of certificates, keys and secrets management within enterprise environments. Significant CI/CD experience, including designing, supporting ...

Kubernetes (EKS and/or RKE) Docker Helm Terraform Ansible Prometheus Grafana Kafka MongoDB MySQL PostgreSQL GitLab CI/CD Git Certificate Management and PKI Secrets Management IAM Experience with microservice-based architectures Hands-on experience managing highly available services within Kubernetes environments Experience supporting production traffic … supporting large-scale microservice ecosystems Linux administration within containerised environments Puppet Keycloak HashiCorp Vault Python Bash DevSecOps tooling and practices ITIL-based service management experience Responsibilities Design, deploy and support resilient cloud infrastructure across AWS, Azure and Kubernetes environments Build and maintain Infrastructure as Code solutions using Terraform ...

DevSecOps practices across the delivery teams, including: Secure, automated CI/CD pipelines Security scanning integrated into build, test and deployment workflows Vulnerability lifecycle management, including allowlist processes and risk acceptance where required Secrets management and identity/access management Policy enforcement for workloads, container images … leading others): CI/CD and GitOps (e.g. GitHub Actions, Argo CD, Argo Rollouts) Security and compliance tooling (e.g. Trivy scanning and vulnerability management, HashiCorp Vault, cert-manager) Containers and orchestration (e.g. Docker, AWS EKS) Infrastructure as Code (e.g. Terraform) Observability (e.g. Grafana, Loki) Scripting and automation (e.g. Python ...

engineering platform capabilities. * Build, maintain and improve CI/CD pipelines to support reliable and repeatable software delivery. * Implement Infrastructure as Code and configuration management practices. * Develop automation to reduce manual processes and improve engineering efficiency. * Integrate security controls throughout software development and deployment processes. * Support engineering teams with … Microsoft Windows * SQL and database technologies * Prometheus, Grafana and ELK * ArgoCD or Flux * Kafka or NiFi * Nexus, Artifactory or Harbor * IAM, OAuth, OIDC and secrets management * Automated testing frameworks * Networking including DNS, TCP/IP, routing, switching, firewalls and VPNs * TLS, SSL, PKI and encryption technologies Essential Requirements ...

/CD pipelines to enable secure, repeatable deployments. * Implement monitoring, logging, alerting and observability capabilities. * Ensure platform resilience, availability and operational readiness. * Manage configuration, secrets and environment controls. * Embed security best practice throughout the delivery lifecycle. * Support incident response, troubleshooting and continuous improvement activities. * Work across engineering and assurance … pipeline experience. * Experience with containerisation technologies, ideally Docker and Kubernetes. * Strong understanding of observability, monitoring and operational support. * Knowledge of cloud security, IAM, secrets management and governance controls. * Experience delivering and supporting production cloud environments within secure or regulated settings. * Strong stakeholder engagement and collaboration skills. Essential Requirements ...

software in air-gapped or disconnected environments, including offline dependencies and moving artefacts across the boundary. Good instincts on secure development, authentication, authorisation and secrets management. Putting AI or ML models into production, LLM features included. Infrastructure as code with Terraform, Ansible or similar, plus configuration management. Observability ...

environment. The Role You will take ownership of the technical delivery required to establish a secure and reliable connection between an existing Azure API Management (APIM) instance and an Azure App Service application. Key Responsibilities Azure API Management & App Service Integration Azure Application Engineering Security & Identity DevOps & Production … Readiness Expected Deliverables Essential Skills & Experience Extensive hands-on Azure engineering experience. Strong Azure API Management (APIM) expertise. Azure App Service administration and troubleshooting. Microsoft Entra ID, Managed Identities and RBAC. Application and API security within regulated or secure environments. Azure networking, DNS, certificates and connectivity management. Production-grade ...

templates that all three teams can reuse. Review code, infrastructure-as-code and configuration changes for security issues. Handle day-to-day vulnerability management, including pen test findings: prioritise what's genuinely exploitable, track fixes and check they've worked. Help run threat modelling sessions in IriusRisk and turn … results into backlog tickets. Look after secrets management, certificates and access reviews and keep security documentation, control evidence and CAB records up to date. Be the go-to person when security is blocking a delivery team, cover for the senior engineers when priorities shift and flag where teams ...

embed DevSecOps engineering practices across multiple MOD digital products Design and govern secure CI/CD and GitOps pipelines Integrate security scanning, vulnerability management and compliance controls Drive Infrastructure as Code using Terraform Work across Kubernetes/Docker/AWS EKS Implement secrets, identity and access management … requirements Coordinate DevSecOps engineers, developers, testers and infrastructure teams Create and maintain security processes, technical standards and operational runbooks Support incident response, patching, risk management and compliance activity Expereince required: You'll need strong hands-on experience across: AWS | Kubernetes/EKS | Terraform | GitHub Actions | GitOps | Argo CD | Docker ...

embed DevSecOps engineering practices across multiple MOD digital products Design and govern secure CI/CD and GitOps pipelines Integrate security scanning, vulnerability management and compliance controls Drive Infrastructure as Code using Terraform Work across Kubernetes/Docker/AWS EKS Implement secrets, identity and access management … requirements Coordinate DevSecOps engineers, developers, testers and infrastructure teams Create and maintain security processes, technical standards and operational runbooks Support incident response, patching, risk management and compliance activity Expereince required: You'll need strong hands-on experience across: AWS | Kubernetes/EKS | Terraform | GitHub Actions | GitOps | Argo CD | Docker ...

designs for security, permissions, data boundaries and operational risk . Establish appropriate approaches to prompt injection and other AI-specific threats . Introduce appropriate secrets management and API key protection . Address risks associated with data leakage, credential exposure and secret exfiltration . Implement AI evaluation frameworks … vulnerable users . Introduce monitoring, budgeting and reporting around AI model usage and inference costs . Develop approaches to AI cost observability and cost management . Establish standards around maintainability, monitoring and operational support . Work with engineering teams on prompts, context, configuration, tools, APIs, integrations and workflows . ...

without unnecessarily impacting developer productivity. Key Responsibilities Define target and transitional DevSecOps platform architectures. Design secure software supply-chain capabilities including SCA, vulnerability scanning, secrets detection, licence controls, SBOMs, signing and provenance. Assess and recommend vendor solutions, technologies and deployment options. Establish approved, controlled and unsupported usage patterns. Design … across CI/CD, artefact repositories, containers, runtime provisioning and enterprise integrations. Strong understanding of software supply-chain security, including SCA, vulnerability scanning, SBOMs, secrets management and software signing/provenance. Experience with Identity, SSO, RBAC, logging and auditable security controls. Knowledge of Policy-as-Code and automated ...

applications, services and command-line tools using Go. Integrate applications and automation with AWS using boto3 and aws-sdk-go-v2. Automate cloud resource management and infrastructure provisioning. Work with services including EC2, S3, IAM, CloudWatch and Lambda. Manage IAM roles, credentials and secure service integrations. Integrate with enterprise … directories such as OpenLDAP and Active Directory. Automate the retrieval and renewal of secrets and tokens using HashiCorp Vault. Automate tasks, ticket creation and documentation workflows across JIRA and Confluence. Use the Kubernetes API to automate deployments, manage pods and inspect clusters. Develop unit and integration tests for Python ...

complex technical decision-making. Driving engineering standards, quality assurance and best practice. Contributing to architecture, solution design and technical governance. Supporting production services, incident management and live operations. Ensuring solutions are resilient, observable and scalable. Delivering complex implementation work while maintaining strong stakeholder engagement. Producing and maintaining technical documentation. … Security Active SC Clearance. Desirable Skills Python. Bash. Node.js. TypeScript. LocalStack. AWS AppConfig. AWS API Gateway. Lambda Authorizer. Terraform. Helm. Kafka/AWS MSK. Secrets Management. Authentication and Authorisation. Certificate Management. Ideal Candidate You'll be an experienced Principal Developer with a strong background in Java and AWS, capable ...

work closely with engineering, architecture, security and governance teams to establish agentic engineering practices, AI governance, evaluation frameworks, security controls and cost management . Key Responsibilities . Establish coding-agent workflows, repository integration and code review practices . Coach engineering teams on agent-assisted development . Design governance frameworks … agent behaviour, oversight and auditability . Review agentic systems for prompt injection, permissions, data boundaries and secrets management . Implement LLM evaluation, red-teaming and guardrail frameworks . Establish AI cost monitoring, budgeting and reporting . Build reusable reference implementations for agentic services and AI-enabled products . ...

network, infrastructure, cloud and corporate environments. Produce and review high-level security designs covering network security, segmentation, multi-tenancy, virtualisation, containers, encryption, key and secrets management, AI runtime and threat modelling. Design IAM solutions, including identity providers, SSO, RBAC and MFA. Define SIEM/SOAR architecture and detailed ...

domains. Key Responsibilities Define target and transitional architectures for enterprise DevSecOps and engineering platforms. Design secure software supply-chain approaches covering SCA, vulnerability scanning, secrets detection, licence controls, SBOMs, signing and provenance. Establish architectural patterns across CI/CD, artefact repositories, containerised environments and runtime provisioning. Design appropriate identity … architecture and/or platform architecture. Secure software supply chains and modern software-delivery practices. CI/CD architecture and engineering tooling. SCA, vulnerability management/scanning and secrets detection. SBOMs, software signing and provenance. Artefact repositories and container platforms. Identity, SSO and RBAC. Logging, auditability and security ...

security risk. Develop and execute prioritised remediation plans focused on reducing identity-related risk. Review workforce and non-human identity controls, including service accounts, secrets, certificates, APIs, workload identities, and CI/CD credentials. Define target-state IAM operating models, governance, and control improvements. Engage with CISO, Technology Risk … requirements. Required Experience Proven experience leading IAM integration & remediation within a complex regulated environment. Strong expertise across: Active Directory/Entra ID Privileged Access Management (PAM) Service Accounts & Non-Human Identities Secrets & Certificate Management API & Workload Identities CI/CD Credentials Experience assessing large-scale identity estates ...

Design and govern the integration of public blockchains with the bank's core banking, payments, ledger and financial crime systems, covering wallet and key management, transaction monitoring, reconciliation and settlement. Architect the tokenisation of money and assets, including issuance, redemption, transfer and life cycle events, and assess the implications … CQRS, event sourcing and API gateway. Architect secure, resilient and observable solutions on GCP, applying security-by-design principles across identity, network, encryption, secrets and key management. Produce architecture artefacts including solution designs, decision records, integration specifications and non-functional requirements. Partner with product, engineering, security, risk, compliance ...