22 of 22 Permanent Secrets Management Jobs in the South East

tagging, account, and resource conventions for attributable spend. Report on cost trends and forecast implications for engineering leadership. Review and improve security posture, including secrets management, IAM least-privilege access, and network configuration, and work with EA security and platform teams to align with internal standards. Build … post-incident review. Experience managing and optimising cloud cost at organisational scale, including tagging and governance practices. Solid understanding of cloud security fundamentals, including secrets management, least-privilege access, and network segmentation. Strong hands-on AWS experience across compute, networking, storage, IAM, and managed services. Working knowledge ...

client is a leading global investment management company headquartered in London. It manages over $228 billion in assets and serves institutional investors, pension funds, wealth managers, and other sophisticated clients worldwide. The firm specializes in quantitative investing, alternative investments, systematic trading strategies, and technology-driven asset management. Data science … years of software engineering experience, with a strong focus on infrastructure or platform engineering. Strong production-level Python, including testing, typing, packaging, and dependency management; Bash for scripting. Solid Linux fundamentals and understanding of on-prem infrastructure, including networking, storage, and virtualization. Hands-on experience with Terraform and Ansible. ...

clinet is seeking a highly skilled and hands on CyberArk Subject Matter Expert (SME) to own, manage, and continuously enhance the CyberArk Privileged Access Management (PAM) platform end to end. The role demands strong operational expertise, architectural understanding, and the ability to work closely with security, infrastructure, application … CyberArk platform meets security, audit, and compliance requirements. Act as the primary CyberArk SME, providing guidance and support to stakeholders. Own end-to-end management of the CyberArk PAM ecosystem including: PVWA CPM PSM/PSM-SSH Vault Ensure high availability, stability, scalability, and performance of the CyberArk platform. ...

Threat Modelling. Broad knowledge of controls in the industry (NIST, ISO, PCI, SOC, CSF, ISO27001, SABSA and TOGAF) Identity and Access Management (SAML, OAuth, certs, TLS) Identifying security flaws in solutions through threat modelling, architectural assessments and design reviews Identity and Access Management, Data Leakage Prevention, Network … Infrastructure Security Cryptography, Encryption and Key Management, Secrets Management, TLS, IPSec, Ciphers, X509 Application Security Design, DevSecOps, Agile practices, Shift Left concepts and automation You have experience of delivering complex large-scale architectural solutions on cloud or hybrid environments and also the integration of cloud platforms into ...

DevOps, cloud engineering, and automation with a focus on reliability, observability, and scalability. Youll also work with event driven technologies, identity and access management, and data platforms, ensuring their orchestration solutions are resilient, secure, and future-ready. This is an exciting opportunity for an engineer who thrives on solving … Kafka or similar messaging systems Operate and maintain databases and data platforms such as PostgreSQL, Elasticsearch, and MongoDB Configure and support identity and access management (IdAM) solutions such as Keycloak Monitor system health, performance, and capacity using modern observability stacks (Prometheus, Grafana, ELK, OpenTelemetry) Champion DevSecOps practices, embedding security ...

testing. Upgrade Java, JVM, NPM, Spring, open-source libraries, internal dependencies, installed software, base images, and operating systems to supported versions. Establish sustainable dependency-management processes with continuous library updates using Renovate or equivalent tools. Modernize legacy applications and middleware stacks, including those deployed on WebSphere or WebLogic. Containerize … applications using Docker and support deployment to OpenShift. Improve source control, branch management, pull-request, and code-review practices. Design, implement, and optimize CI/CD pipelines to ensure safe, repeatable, automated, and easy releases. Automate database changes using Liquibase or equivalent migration tools. Automate installed software and environment ...

manage identity, access, and governance controls using Azure AD, RBAC, Managed Identities, Conditional Access, and Azure Policy.Ensure cloud security best practices through encryption, secrets management, monitoring, vulnerability remediation, and compliance alignment.Monitor system health, performance, and availability using Azure Monitor, Log Analytics, and Application Insights.Troubleshoot and resolve infrastructure, connectivity ...

defining our version control, auditingand engineering procedures around delivering production software for deployed systems.Additionally, the role will involve somemaintenanceof physical on-site hardware, network management, server administrationto support our in-house research labs.The successful candidate will ideallypossessa solid technical background in both systems engineering and software development. Job Responsibilities … automationexpertise: Strong Linux systems administration skills, including networking, permissions, servicemanagementand troubleshooting, together withproficiencyin automation and scripting using Python,Bashor similar languages. Configuration and release management: Practical experience with Git-based development workflows, automated testing, artifactrepositoriesand versioned releases, with an understanding of how tomaintaintraceability between source code, build environments, deployedsoftwareand ...

Entra Connect, Conditional Access, MFA, PIM and RBAC Microsoft Defender for Cloud and Defender XDR, Sentinel, secure score remediation Key Vault, encryption, certificate and secrets management Azure Policy, management groups, landing zone and governance design (Cloud Adoption Framework/Well-Architected Framework) Migration and modernisation Discovery … Code Bicep, ARM or Terraform PowerShell scripting and Azure CLI; Azure Automation, Update Manager, Logic Apps Azure Monitor, Log Analytics, alerting, dashboards and cost management/FinOps Responsibilities Running workshops and discovery sessions with technical and non-technical stakeholders Producing HLDs, LLDs, as-built documentation and handover to internal ...

programmes. Target Architecture Definition End to end architecture for CI workloads running on Kubernetes Workload isolation, networking, and artifact flow design Autoscaling strategy Resource management approach Secure Container Supply Chain Image build, scanning, and promotion architecture Registry design and environment separation model Policy enforcement approach Secrets management ...

with enterprise APIs, databases, applications and data platforms. Develop reusable connectors, APIs and Model Context Protocol tools. Build automated CI/CD, testing, configuration management and deployment workflows. Implement authentication, access control, secrets management, security and auditability. Establish monitoring, logging, tracing, alerting and evaluation for models, agents … serving platforms, vector databases and LLM gateways. Experience implementing AI evaluation, observability, tracing and performance monitoring. Experience with high availability, autoscaling, load testing, incident management or restricted environments. Experience applying AI to scientific, engineering, energy or geoscience workflows. Why work with us? Competitive salary commensurate with experience Highly attractive ...

Implement and manage firewalls, intrusion detection/prevention, DDoS mitigation, and threat monitoring across network layers Establish secure supply chain practices for infrastructure: vendor management, procurement policy, and third-party risk assessment Lead security hardening programmes for network appliances, access points, and edge infrastructure; manage patching and lifecycle Cloud … security groups, private connectivity (Direct Connect/ExpressRoute) Establish cloud governance controls: tagging strategies, resource quotas, cross-account networking, hybrid connectivity Build and maintain secrets management, certificate lifecycle, and identity federation across cloud and on-premises Mentorship & Culture: Coach and mentor infrastructure/network engineers to understand security ...

engineers and making implementation decisions Contributing to planning and reporting progress to the DevSecOps Technical Lead Engaging other teams on tooling usage and dependency management Key Experience Required UK Sole National with active DV Clearance Significant experience implementing, configuring and using CI/CD pipelines, ideally Azure DevOps … Harbor SCA, IAST and DAST tooling such as Black Duck, Coverity, Codesight, JFrog or Snyk Automated test tooling, ideally Selenium or Robot Framework Secure secrets management, ideally Azure DevOps and HashiCorp Vault Version control with Git Comfortable across both Windows and Linux operating systems Test management tooling ...

sources such as APIs, databases, flat files, webhooks and message queues. A strong appreciation of data security and governance , including GDPR, role-based access, secrets management and the responsible handling of sensitive information. The ability to take an ambiguous business challenge and turn it into a clear, pragmatic ...

code (IaC) using Terraform, implementing reusable, secure modules. \n Drive improvements to automation workflows and configuration management. \n Contribute to the creation and lifecycle management of golden AMIs. \n \n \n Containerisation & Orchestration: \n \n Manage and optimise containerised workloads on Kubernetes (EKS). \n Use Helm to package … system resilience, scalability, and fault tolerance. \n \n \n Security & Compliance \n \n Implement and enforce cloud security best practices, including identity and access management, encryption, and secrets governance. \n Manage key lifecycle and cryptographic operations using AWS KMS. \n Participate in vulnerability management processes and remediation ...

threat modelling and design reviews for new products and infrastructure, and defining the security invariants every team builds against: tenant isolation, authentication and authorisation, secrets, least privilege, and trust boundaries Building the libraries, patterns, and CI/CD guardrails that make the secure way the easy way, and deciding … read several. You've built and operated security or developer tooling in CI/CD pipelines, such as static and dependency analysis, secrets detection, or policy-as-code, and engineers actually adopted it Hands-on depth securing multi-tenant systems on a major cloud. ...

many of WTW’s market leading products. You will have worked on large scale and globally deployed SaaS applications that have a mature stack management capability. A sound technical background is essential to be successful in this role with experience in delivering large scale Cloud services. The Role: Provide … technical input, guidance and leadership to the team (including code quality, best practices, processes, some aspects of release management, etc.). Assist in the design and documenting of solutions meeting functional and non-functional requirements. Lead by example getting directly involved in the day-to-day delivery of work ...

Domain-Driven Design (DDD) principles to create scalable and maintainable solutions. Contribute to technical design decisions and solution architecture discussions. Support software lifecycle management, releases, and ongoing maintenance activities. DevOps & Containerisation: Build, maintain, and improve containerised deployment solutions using Docker. Support Kubernetes deployments and associated tooling. Automate operational … initiatives to ensure platforms remain supported, secure, and aligned with current best practices. Implement security improvements based on audit findings and threat assessments. Incident Management & Operational Support: Investigate production incidents across infrastructure, application, and deployment layers. Perform root cause analysis and implement preventative measures. Coordinate resolution activities with cross ...

with our data protection rules. CI/CD pipelines. Build, maintain and continuously improve our Azure DevOps build, test and release pipelines, including artifact management, controlled build configurations and pipeline variables, and automated quality and security gates. Consolidate duplicated per-client pipelines toward a single deployment path … chain to production, with rehearsed rollback for every release. Support product go-lives and maintain a clear, communicated release calendar. Security and access. Own secrets and certificate management (Azure Key Vault, managed identities), role-based access control and least-privilege across the estate, and platform patching. Work with ...

with our data protection rules. CI/CD pipelines. Build, maintain and continuously improve our Azure DevOps build, test and release pipelines, including artifact management, controlled build configurations and pipeline variables, and automated quality and security gates. Consolidate duplicated per-client pipelines toward a single deployment path … chain to production, with rehearsed rollback for every release. Support product go-lives and maintain a clear, communicated release calendar. Security and access. Own secrets and certificate management (Azure Key Vault, managed identities), role-based access control and least-privilege across the estate, and platform patching. Work with ...

Terraform, Ansible,scriptingand CI/CD practices to improve reliability and repeatability. Operate and continuously improve Kubernetes, container platforms, integration services, monitoring, logging,secretsmanagement and related platform components. Support the introduction and operation of approved AI platforms and AI-enabled IT services in line with company governance, cybersecurity, dataprotectionand compliance … troubleshooting. Strong knowledge ofinfrastructureas code, automation, CI/CD, monitoring, logging, networking,virtualisation, storage, backup, WindowsServerand Linux system administration. Experience with Kubernetes, container platforms,secretsmanagement, Kafka or ELK/Elastic-based monitoring and logging platforms. Understanding ofcybersecurity, access management, data protection and compliance requirements for cloud and AI-enabled ...

Strong knowledge of industry frameworks such as NCSC guidance, NIST CSF/800-53, ISO 27001/2 or SABSA. Understanding of identity & access management, network security, encryption, API security and secrets management. Experience with vulnerability management, penetration testing and security assurance processes. Ability to define, document ...