19 of 19 Permanent Secrets Management Jobs in the City of London

contribute to solution design and delivery for identity projects. Collaborate with cross-functional teams and stakeholders in an agile environment. Support privileged access management and secrets management initiatives. Strong knowledge of Active Directory security, resilience, and legacy authentication protocols (LDAP, Kerberos, NTLM). Experience with Microsoft Entra … Access, MFA, identity governance, and domain services. Proficiency in modern authentication protocols (OAuth, SAML) and app integrations. Experience with Entra Application Provisioning (SCIM) and management of internal, external, and client identities. Skilled in PowerShell automation and Azure-based identity tools. Understanding of IAM lifecycle management, identity governance ...

compliance verification, observability pipelines, and secure orchestration capabilities across a global estate.You will work across Python, PostgreSQL, Git based workflows, Jenkins pipelines, Ansible orchestration, secrets management, artefact management, and observability tooling to build resilient, auditable and scalable automation services. Key Responsibilities 1. Automation Engineering & Orchestration Design … handling in PostgreSQL. Implement run state tracking, job history retention, and audit evidence capture. Optimise queries and data handling for operational reliability. 5. Security & Secrets Management Integrate Vault with CI/CD and AAP workflows. Apply least privilege principles and secure credential lifecycle management. Contribute to enterprise standards ...

Azure and AWS environments as part of cyber due diligence, technical review and portfolio company engagements. Assessing cloud tenancy and account architecture, including Azure management groups, subscriptions and landing zones, and AWS Organizations, accounts, OUs and Control Tower set-up. Reviewing identity and access management across cloud … Cloud, AWS Security Hub, GuardDuty, CSPM/CNAPP platforms) against CIS Benchmarks and Well-Architected security guidance. Reviewing data protection controls, including encryption, key management (Azure Key Vault, AWS KMS), secrets management, storage exposure and backup resilience. Assessing logging, monitoring and detection capabilities, including Azure Monitor, Microsoft ...

clear vision for how systems connect, share data, and enable business capabilities. Lead or support the evaluation of integration platforms and tooling (API management, event streaming, iPaaS, middleware), providing clear recommendations, reference architectures, and evidence to inform investment decisions. Assess the current integration estate with technical rigour, identify … e.g. Apache Kafka, Amazon SQS/SNS, Amazon EventBridge), batch and near-real-time data exchange, and EDI. Architect API gateway strategy - including lifecycle management, versioning, consumer experience, and throttling - ensuring APIs are treated as products, not just interfaces (e.g. Amazon API Gateway, Kong, or equivalent). Ensure ...

plane mechanics, custom resource definitions (CRDs), and operators. (MUST) IaC: Terraform/Open Tofu module design. (MUST) Kubernetes Engineering: GitOps (Argo CD/Flux), secrets management, ingress/mesh, and OPA/Gatekeeper. (MUST) Observability: OpenTelemetry (MUST) Tooling: Spacelift, Atlantis, or Terraform Cloud (Desired) Governance: EPAC (Enterprise Policy … Proven experience building and architecting complex Kubernetes platforms from scratch. Experience with Kubernetes platform engineering, including ingress and service mesh, OPA/Gatekeeper policy, secrets management, and progressive delivery. Strong security awareness, displaying comfort with CAF/ALZ patterns, least-privilege IAM, network segmentation, and policy-as-code. ...

response and recovery capabilities. Design and implement access controls for human and non-human identities, including service and agentic AI identities. Strengthen authentication, authorisation, secrets management, audit and privilege segmentation across systems and services. Implement scalable access-control models and access policy-as-code, enabling teams to provision … identity and access. A strong understanding of network segmentation, identity controls and security architecture across cloud systems. Hands‐on experience implementing identity and access management and privileged‐access controls across enterprise identity platforms. Strong knowledge of authentication, authorisation, secrets management, audit, least privilege and privilege segmentation. Experience ...

identities in Kubernetes, and secure access controls in landing zones and the hyperscaler Own connectivity and network-level security: SSL/TLS certificate lifecycle management, DNS zone management, and secure network access to endpoints Define architectural standards and guardrails, with security as a first-class concern (policy … code/OPA, access controls, secrets management, compliance-driven engineering) Instrument platforms for observability (Grafana, Prometheus, OpenTelemetry) Provide architectural oversight across multi-disciplinary workstreams, staying close enough to unblock the team directly Capture field learnings, codify reusable patterns and blueprints, and mentor engineers hands‐on Translate enterprise requirements ...

Python-based AI applications, APIs, microservices and cloud-native integrations. Define engineering standards covering source control, automated testing, CI/CD, infrastructure as code, secrets management and release management. Provide technical direction across orchestration, tool calling, retrieval-augmented generation, structured outputs, context management and asynchronous workflows. Ensure … operational monitoring across agent workflows, including tracing, logging, performance, tool-call outcomes and cost. Define failure handling, retries, timeouts, fallbacks, human approval and exception-management patterns. Ensure solutions address identity, access control, data protection, content safety, auditability, responsible AI and regulatory requirements. Work with architecture, security, risk, legal ...

scope, it is here. What the Platform Automation Engineer will be doing: Own and evolve an internally built Python provisioning platform for Linux server management Introduce modern secrets management — replacing manual credential handling with Vault-compatible tooling Bring network and firewall configuration into version control, shipped … process for Windows desktops and select servers Improve application build, test, and release pipelines Pull a small cloud footprint under the same code-driven management as the rest of the estate Sharpen alerting and monitoring so faults are caught before they cause impact What the Platform Automation Engineer will ...

work. With a heritage dating back more than 175 years, we have a long history of innovation in savings and investments, combining asset management and insurance expertise to offer a wide range of solutions. Our two distinct operating segments, Asset Management and Life, work together to provide access … need to succeed in your role. The Opportunity: Data and AI are at the heart of how we plan to grow our Asset Management business. We are modernising how data is sourced, engineered and consumed across the firm. The goal is trusted, reusable data products that support investment decisions ...

Role Data and AI are at the heart of how we plan to grow our Asset Management business. We are modernising how data is sourced, engineered and consumed across the firm. The goal is trusted, reusable data products that support investment decisions, client reporting, regulatory submissions and a growing … pipeline-by-pipeline delivery to a modern, governed architecture built around data products. This is a data engineering leadership role, not a general engineering management role. We want a practitioner who has built modern data platforms hands-on. You should know how to use modern data technologies to design ...

Bash. Experience operating and supporting automation platforms within production environments. Solid understanding of automation and CI/CD security best practices, including RBAC, secrets management, and pipeline hardening. Experience integrating systems using REST APIs and event‐driven architectures. Familiarity with Azure cloud services and cloud‐native automation approaches. ...

Drive operational perfection in a GitOps model using Argo CD. Implement progressive delivery (canary releases, validation gates), codify autoscaling and resiliency, and manage secure secrets via HashiCorp Vault and Kubernetes Secrets. Embrace AI technology : Use AI-assisted tools to accelerate development, validation, and optimization of configuration-as-code, improving … would be particularly advantageous, but we encourage applications without these: Hands-on with Helm or Kustomize Experience with GitOps (e.g., Argo CD) Knowledge of secrets management (e.g., HashiCorp Vault) Experience with observability (metrics/logs/tracing) CollabHiring Why Cisco? At Cisco, we’re revolutionizing how data ...

production readiness reviews. Has advanced hands-on experience of DevOps practices including monitoring, virtual networks, cloud storage, containers and orchestration, CI/CD, configuration management, and securing cloud applications. Requirements: Advanced Terraform: Expertise in modules, providers, state management, lifecycle controls, drift detection, safe refactoring, and remote state … Operations: Hands-on experience managing production, multi-account, multi-region AWS environments across ECS, RDS, ALB, VPC, IAM, Route53, ECR, S3, Lambda, DynamoDB, SQS, Secrets Manager, KMS, and CloudWatch. GitHub Actions CI/CD: Experience building and troubleshooting reusable workflows, OIDC authentication, approval gates, runners, Terraform deployments, application deployments ...

leading retailers. Position summary OneView is looking for a Senior Security Engineer to join our DevSecOps team and own the growth and ongoing management of our InfoSec program, covering cloud-hosted applications and infrastructure, security culture, and customer security requirements. You write security policy and standards, which the Sr. … gates in CI/CD pipelines that stop a change that fails a security requirement. Has hands-on experience with infrastructure as code guardrails, secrets and key management, and policy as code. Has prepared the evidence for an external security audit or certification, such ...

utilities) Develop clean, testable Python utilities to improve module correctness, developer workflow, and operational efficiency Implement Git-based engineering practices, including code reviews, release management, and continuous integration and delivery for Terraform Integrate security, policy checks, and guardrails into module and pipeline workflows, partnering with security, risk, and compliance … graph database concepts) Working knowledge of networking and security fundamentals, including VPC/subnets, security groups, routing, encryption with KMS, identity and access management, and secrets handling Exposure to GCP infrastructure-as-code patterns, including Terraform provider usage, state, and core platform concepts Ability to design “paved road ...

differentiated offers and services, and create the commercial momentum required to launch and scale new Identity Security practices. This is not a traditional alliance management role. The focus is on moving partners from executive alignment and commitment through investment, offer creation, lighthouse customers and repeatable commercial growth. Your Impact … launching partner offers, practices or new technology categories. Experience working across global and regional partner organizations. Experience in Identity Security, PAM, IGA, machine identity, secrets management or related cybersecurity domains. Familiarity with Agentic AI, Non‐Human Identity or AI Security. Experience working with complex enterprise platform vendors ...

seeking a Platform Automation Engineer to own and evolve an internal Python provisioning platform for Linux server management. You will implement Vault-compatible secrets management, bring network and firewall configuration under version control, and build repeatable, hardened deployment pipelines across Windows desktops and servers. Significant programmes of work ...

Define and maintain target-state architecture for Microsoft Azure, cloud and hybrid technology platforms. Define reference architectures and reusable patterns for Azure landing zones, Management Groups, subscriptions, networking, identity, compute, storage, monitoring and governance. Establish architectural principles and guardrails covering Azure Policy, RBAC, PIM, private connectivity, resource organisation, logging … Access, PIM, RBAC, MFA, SSO, managed identities and workload identities. Define architectural patterns for Azure Firewall, WAF, DDoS Protection, Key Vault, encryption, certificates and secrets management. Define architecture patterns aligned with Zero Trust principles across identity, networks, applications and cloud platforms. Ensure security, vulnerability management, hardening, logging ...