1 to 25 of 26 Permanent Secrets Management Jobs in Central London

contribute to solution design and delivery for identity projects. Collaborate with cross-functional teams and stakeholders in an agile environment. Support privileged access management and secrets management initiatives. Strong knowledge of Active Directory security, resilience, and legacy authentication protocols (LDAP, Kerberos, NTLM). Experience with Microsoft Entra … Access, MFA, identity governance, and domain services. Proficiency in modern authentication protocols (OAuth, SAML) and app integrations. Experience with Entra Application Provisioning (SCIM) and management of internal, external, and client identities. Skilled in PowerShell automation and Azure-based identity tools. Understanding of IAM lifecycle management, identity governance ...

compliance verification, observability pipelines, and secure orchestration capabilities across a global estate.You will work across Python, PostgreSQL, Git based workflows, Jenkins pipelines, Ansible orchestration, secrets management, artefact management, and observability tooling to build resilient, auditable and scalable automation services. Key Responsibilities 1. Automation Engineering & Orchestration Design … handling in PostgreSQL. Implement run state tracking, job history retention, and audit evidence capture. Optimise queries and data handling for operational reliability. 5. Security & Secrets Management Integrate Vault with CI/CD and AAP workflows. Apply least privilege principles and secure credential lifecycle management. Contribute to enterprise standards ...

Azure and AWS environments as part of cyber due diligence, technical review and portfolio company engagements. Assessing cloud tenancy and account architecture, including Azure management groups, subscriptions and landing zones, and AWS Organizations, accounts, OUs and Control Tower set-up. Reviewing identity and access management across cloud … Cloud, AWS Security Hub, GuardDuty, CSPM/CNAPP platforms) against CIS Benchmarks and Well-Architected security guidance. Reviewing data protection controls, including encryption, key management (Azure Key Vault, AWS KMS), secrets management, storage exposure and backup resilience. Assessing logging, monitoring and detection capabilities, including Azure Monitor, Microsoft ...

clear vision for how systems connect, share data, and enable business capabilities. Lead or support the evaluation of integration platforms and tooling (API management, event streaming, iPaaS, middleware), providing clear recommendations, reference architectures, and evidence to inform investment decisions. Assess the current integration estate with technical rigour, identify … e.g. Apache Kafka, Amazon SQS/SNS, Amazon EventBridge), batch and near-real-time data exchange, and EDI. Architect API gateway strategy - including lifecycle management, versioning, consumer experience, and throttling - ensuring APIs are treated as products, not just interfaces (e.g. Amazon API Gateway, Kong, or equivalent). Ensure ...

plane mechanics, custom resource definitions (CRDs), and operators. (MUST) IaC: Terraform/Open Tofu module design. (MUST) Kubernetes Engineering: GitOps (Argo CD/Flux), secrets management, ingress/mesh, and OPA/Gatekeeper. (MUST) Observability: OpenTelemetry (MUST) Tooling: Spacelift, Atlantis, or Terraform Cloud (Desired) Governance: EPAC (Enterprise Policy … Proven experience building and architecting complex Kubernetes platforms from scratch. Experience with Kubernetes platform engineering, including ingress and service mesh, OPA/Gatekeeper policy, secrets management, and progressive delivery. Strong security awareness, displaying comfort with CAF/ALZ patterns, least-privilege IAM, network segmentation, and policy-as-code. ...

response and recovery capabilities. Design and implement access controls for human and non-human identities, including service and agentic AI identities. Strengthen authentication, authorisation, secrets management, audit and privilege segmentation across systems and services. Implement scalable access-control models and access policy-as-code, enabling teams to provision … identity and access. A strong understanding of network segmentation, identity controls and security architecture across cloud systems. Hands‐on experience implementing identity and access management and privileged‐access controls across enterprise identity platforms. Strong knowledge of authentication, authorisation, secrets management, audit, least privilege and privilege segmentation. Experience ...

path to live. What you'll do * Design and continuously improve secure, automated CI/CD and GitOps pipelines * Embed security scanning, vulnerability management and secrets management into delivery workflows * Establish secure-by-design engineering practices and enforce security and technical standards * Lead Infrastructure as Code … with strong hands-on engineering and technical leadership experience across: * CI/CD & GitOps: GitHub Actions, Argo CD, Argo Rollouts * Security & Compliance: Trivy, vulnerability management, HashiCorp Vault, cert-manager * Containers & Cloud: Docker, AWS EKS, AWS IAM, S3 and network policies * Infrastructure as Code: Terraform * Observability: Grafana, Loki * Automation: Python ...

identities in Kubernetes, and secure access controls in landing zones and the hyperscaler Own connectivity and network-level security: SSL/TLS certificate lifecycle management, DNS zone management, and secure network access to endpoints Define architectural standards and guardrails, with security as a first-class concern (policy … code/OPA, access controls, secrets management, compliance-driven engineering) Instrument platforms for observability (Grafana, Prometheus, OpenTelemetry) Provide architectural oversight across multi-disciplinary workstreams, staying close enough to unblock the team directly Capture field learnings, codify reusable patterns and blueprints, and mentor engineers hands‐on Translate enterprise requirements ...

apply guardrails. Every manual runbook step is a candidate for a pipeline. Run the AWS footprint. VPC and networking, ECS Fargate, DMS, S3, IAM, Secrets Manager, EventBridge provisioned as code, sized sensibly, and cost‐aware (you'll make the calls on things like NAT vs VPC endpoints). … healthy respect for what a bad plan can do in production. Strong AWS. Hands‐on across networking, containers (ECS/Fargate), IAM, S3, Secrets Manager, and event‐driven scheduling built as code, not clicked in the console. CI/CD you've actually built. GitHub Actions (or equivalent), OIDC ...

backup, resilience and disaster recovery work, including testing that recovery actually works. Security and compliance Applies security fundamentals day to day: least privilege IAM, secrets handling, patching, network segmentation and certificate management. Supports evidence gathering and control work for our security and compliance obligations. Ways of working Works closely … integrating off-the-shelf vendor products as well as internally built tools A good grasp of core security fundamentals, including IAM and least privilege, secrets management, networking basics (VPC, DNS, TLS, load balancing) and vulnerability management Comfortable troubleshooting Linux and containerised workloads, and scripting your ...

Python-based AI applications, APIs, microservices and cloud-native integrations. Define engineering standards covering source control, automated testing, CI/CD, infrastructure as code, secrets management and release management. Provide technical direction across orchestration, tool calling, retrieval-augmented generation, structured outputs, context management and asynchronous workflows. Ensure … operational monitoring across agent workflows, including tracing, logging, performance, tool-call outcomes and cost. Define failure handling, retries, timeouts, fallbacks, human approval and exception-management patterns. Ensure solutions address identity, access control, data protection, content safety, auditability, responsible AI and regulatory requirements. Work with architecture, security, risk, legal ...

scope, it is here. What the Platform Automation Engineer will be doing: Own and evolve an internally built Python provisioning platform for Linux server management Introduce modern secrets management — replacing manual credential handling with Vault-compatible tooling Bring network and firewall configuration into version control, shipped … process for Windows desktops and select servers Improve application build, test, and release pipelines Pull a small cloud footprint under the same code-driven management as the rest of the estate Sharpen alerting and monitoring so faults are caught before they cause impact What the Platform Automation Engineer will ...

work. With a heritage dating back more than 175 years, we have a long history of innovation in savings and investments, combining asset management and insurance expertise to offer a wide range of solutions. Our two distinct operating segments, Asset Management and Life, work together to provide access … need to succeed in your role. The Opportunity: Data and AI are at the heart of how we plan to grow our Asset Management business. We are modernising how data is sourced, engineered and consumed across the firm. The goal is trusted, reusable data products that support investment decisions ...

Role Data and AI are at the heart of how we plan to grow our Asset Management business. We are modernising how data is sourced, engineered and consumed across the firm. The goal is trusted, reusable data products that support investment decisions, client reporting, regulatory submissions and a growing … pipeline-by-pipeline delivery to a modern, governed architecture built around data products. This is a data engineering leadership role, not a general engineering management role. We want a practitioner who has built modern data platforms hands-on. You should know how to use modern data technologies to design ...

Bash. Experience operating and supporting automation platforms within production environments. Solid understanding of automation and CI/CD security best practices, including RBAC, secrets management, and pipeline hardening. Experience integrating systems using REST APIs and event‐driven architectures. Familiarity with Azure cloud services and cloud‐native automation approaches. ...

plane, and deploying to it with confidence. This is the hardest and most important part of the job. Strengthen our security and compliance posture: secrets management, access controls, infrastructure hardening, and the SOC2-and-beyond controls that customers will audit us on Build observability that keeps a complex ...

data plane, and deploying to it with confidence. This is the hardest and most important part of the job. Security and compliance posture: secrets management, access controls, infrastructure hardening, and the audit‐grade controls customers will hold you to Observability: telemetry, metrics, logging, tracing, dashboards, and alerting that ...

Python frameworks such as FastAPI or Flask. Build and support cloud-native solutions leveraging AWS services including Lambda, ECS Fargate, API Gateway, DynamoDB, S3, Secrets Manager, and CloudWatch. Work closely with the Lead React Engineer, Technical Architects, and Engineering teams to implement technical designs, architectural patterns, and coding standards. … backend services. Strong hands‐on experience with AWS cloud services, including ECS Fargate, Lambda, API Gateway, DynamoDB, S3, SNS, SQS, EventBridge, Step Functions, IAM, Secrets Manager, and CloudWatch. Strong experience with serverless deployment and architecture patterns. Experience developing and deploying containerized applications using Docker and AWS ECS/Fargate. ...

after go-live and improve the build Quality, security and support Build evaluation sets and monitoring for accuracy, cost and usage Apply least privilege, secrets management and client data handling rules Write handover documentation and runbooks for our service desks Record AI systems in our register with owners … business systems through APIs, for example Microsoft Graph, a CRM or a ticketing tool Builds with security and data protection in mind: least privilege, secrets handling and safe use of client data Can work directly with client users to understand a problem and explain what was built Desirable skills ...

Drive operational perfection in a GitOps model using Argo CD. Implement progressive delivery (canary releases, validation gates), codify autoscaling and resiliency, and manage secure secrets via HashiCorp Vault and Kubernetes Secrets. Embrace AI technology : Use AI-assisted tools to accelerate development, validation, and optimization of configuration-as-code, improving … would be particularly advantageous, but we encourage applications without these: Hands-on with Helm or Kustomize Experience with GitOps (e.g., Argo CD) Knowledge of secrets management (e.g., HashiCorp Vault) Experience with observability (metrics/logs/tracing) CollabHiring Why Cisco? At Cisco, we’re revolutionizing how data ...

production readiness reviews. Has advanced hands-on experience of DevOps practices including monitoring, virtual networks, cloud storage, containers and orchestration, CI/CD, configuration management, and securing cloud applications. Requirements: Advanced Terraform: Expertise in modules, providers, state management, lifecycle controls, drift detection, safe refactoring, and remote state … Operations: Hands-on experience managing production, multi-account, multi-region AWS environments across ECS, RDS, ALB, VPC, IAM, Route53, ECR, S3, Lambda, DynamoDB, SQS, Secrets Manager, KMS, and CloudWatch. GitHub Actions CI/CD: Experience building and troubleshooting reusable workflows, OIDC authentication, approval gates, runners, Terraform deployments, application deployments ...

leading retailers. Position summary OneView is looking for a Senior Security Engineer to join our DevSecOps team and own the growth and ongoing management of our InfoSec program, covering cloud-hosted applications and infrastructure, security culture, and customer security requirements. You write security policy and standards, which the Sr. … gates in CI/CD pipelines that stop a change that fails a security requirement. Has hands-on experience with infrastructure as code guardrails, secrets and key management, and policy as code. Has prepared the evidence for an external security audit or certification, such ...

utilities) Develop clean, testable Python utilities to improve module correctness, developer workflow, and operational efficiency Implement Git-based engineering practices, including code reviews, release management, and continuous integration and delivery for Terraform Integrate security, policy checks, and guardrails into module and pipeline workflows, partnering with security, risk, and compliance … graph database concepts) Working knowledge of networking and security fundamentals, including VPC/subnets, security groups, routing, encryption with KMS, identity and access management, and secrets handling Exposure to GCP infrastructure-as-code patterns, including Terraform provider usage, state, and core platform concepts Ability to design “paved road ...

differentiated offers and services, and create the commercial momentum required to launch and scale new Identity Security practices. This is not a traditional alliance management role. The focus is on moving partners from executive alignment and commitment through investment, offer creation, lighthouse customers and repeatable commercial growth. Your Impact … launching partner offers, practices or new technology categories. Experience working across global and regional partner organizations. Experience in Identity Security, PAM, IGA, machine identity, secrets management or related cybersecurity domains. Familiarity with Agentic AI, Non‐Human Identity or AI Security. Experience working with complex enterprise platform vendors ...

seeking a Platform Automation Engineer to own and evolve an internal Python provisioning platform for Linux server management. You will implement Vault-compatible secrets management, bring network and firewall configuration under version control, and build repeatable, hardened deployment pipelines across Windows desktops and servers. Significant programmes of work ...