5 of 5 Remote Secrets Management Jobs in the City of London

working +SC cleared role - must be elligible for clearance Are you an experienced CyberArk Architect who can define and deliver enterprise-grade PAM and secrets-management platforms in secure, complex environments? We are seeking a highly skilled CyberArk PAM Self-Hosted Architect to take ownership of architectural strategy … architecture and high-level design for CyberArk PAM Self-Hosted and CyberArk Conjur, defining these as strategic platforms for privileged access and secrets management. Establish and maintain reference architectures , patterns, and standards for onboarding infrastructure, applications, DevOps platforms and third parties into CyberArk. Architect CyberArk PAM Self-Hosted components ...

including: PVault, CPM, PSM, PVWA, AIM/CCP, Conjur, PTA Onboard and manage privileged accounts, safes, platforms, and custom connectors. Implement credential rotation, session management, secrets management, and least-privilege access controls. Enforce privileged access controls and monitor compliance with internal and regulatory requirements. Develop runbooks, operational ...

maintain microservices in Java (preferably Java 11+/17) for mission-critical payment flows. Develop event-driven solutions using Kafka (producers/consumers, schema management, stream processing). Deploy and operate services on OpenShift (Kubernetes-based), including CI/CD pipelines, configuration, scaling, and observability. Implement robust error handling … idempotency, retries, and exactly-once/at-least-once delivery where appropriate. Ensure security, compliance, and auditability across the payments life cycle (encryption, secrets management, logging). Collaborate with product, QA, SRE, and architecture teams to deliver high-quality features in iterative releases. Contribute to performance tuning, resilience ...

security across IAM, networking, compute, storage and serverless AWS security controls including IAM least privilege, VPC segmentation, private endpoints, WAF/Shield, KMS, secrets management and logging Operating AWS Security Hub, GuardDuty, Inspector, Config and Access Analyzer Vulnerability remediation across OS/packages, containers, libraries, serverless runtimes … cloud misconfigurations CI/CD and DevSecOps practices including shift-left reviews, dependency management and pipeline guardrails Infrastructure as Code security using Terraform and/or CloudFormation Python or Bash automation to streamline remediation and control validation Working with common scanning tools such as Inspector, Snyk, Trivy, Dependabot ...

customer-facing applications Kubernetes (EKS) clusters in production Infrastructure as Code with Terraform Highly available, scalable platforms used for current accounts and investment products Secrets and access management (Vault exposure a bonus) Tech you’ll need Essential AWS (EC2, VPC, IAM, Load Balancers, Lambda, API Gateways) Kubernetes ...