Design Engineer - HashiCorp Vault/Identity & Access Management (IAM)

You will be responsible for managing end-to-end solution design, producing high-level architecture designs and ensuring solutions align with business requirements, security principles and enterprise architecture standards.

The successful candidate will have substantial hands-on experience with HashiCorp Vault and Terraform, alongside the ability to define secure, scalable and reusable secrets management solutions within large-scale enterprise environments.

You will also work closely with technical architects, engineers, senior stakeholders and design authorities, providing technical leadership and guidance across key programmes., * Lead end-to-end solution design, producing high-level architecture and technical design documentation.

• Design and implement secure HashiCorp Vault integrations and secrets management solutions.
• Develop and maintain complex Terraform modules.
• Define and influence secrets management strategies and architectural patterns.
• Design and implement workload identity frameworks within enterprise environments.
• Work across Identity & Access Management, Privileged Access Management (PAM) and federated identity.
• Identify, document and mitigate technical risks, issues and design deviations.
• Present architectural solutions and design decisions to senior stakeholders and design authorities.
• Provide technical leadership and guidance to architects, engineers and project teams.
• Ensure solutions meet security, regulatory and business requirements.

We are seeking an experienced Design Engineer with strong expertise in Cybersecurity, Identity & Access Management (IAM) and HashiCorp Vault to join a major financial services transformation programme., HashiCorp Vault & Terraform

• 3+ years’ experience working with HashiCorp Vault, ideally within on-premise environments.
• 3+ years’ experience using HashiCorp Terraform.
• Proven experience designing and building complex Terraform modules.
• Strong understanding of Vault integrations, Secret Engines and authentication methods.
• Experience troubleshooting Vault integration issues and improving service efficiency.
• Experience developing reusable secrets management patterns.

Identity & Access Management/Cybersecurity

• Experience designing or implementing Workload Identity Frameworks.
• Strong understanding of Identity & Access Management (IAM).
• Experience with Privileged Access Management (PAM).
• Knowledge of federated identity and Single Sign-On (SSO).
• Understanding of authentication protocols including Kerberos, OAuth and SAML.
• Strong cybersecurity knowledge across areas such as infrastructure, network, cloud, application or data security.

Architecture & Leadership

• Experience producing high-level designs and end-to-end solution architecture.
• Ability to present technical solutions to senior stakeholders and design authorities.
• Experience working within large-scale IT transformation programmes.
• Strong understanding of enterprise and solution architecture.
• Excellent stakeholder management and communication skills.
• Experience managing technical risks, dependencies and design governance., * Degree or equivalent professional experience in Cybersecurity, Computer Science or Software Engineering.
• CISSP, CISM or another recognised cybersecurity certification.
• SABSA or TOGAF certification.
• Experience within banking or financial services.
• Strong Jira and Confluence experience.