> Markdown version of [/jobs/ext/4534837-design-engineer](https://www.wearedevelopers.com/jobs/ext/4534837-design-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Design Engineer

- **Company:** Insight
- **Location:** Sheffield, UK
- **Experience:** Experienced
- **Salary:** £71,982.0
- **Contract:** Permanent contract
- **Skills:** Confluence, Cyber Security, Federated Identity Management, Kerberos (Protocol), OAuth, Sherwood Applied Business Security Architecture, Security Assertion Markup Language (SAML), Single Sign-On, Software Engineering, Togaf, Information Technology, Hashicorp, Terraform
- **Published:** November 3, 2026
- **Apply:** https://www.adzuna.co.uk/jobs/details/5950861647

## About the Role

Demonstrate excellent knowledge of cybersecurity practices, risk management processes, security architecture, and incident response methodologies.

 - Possess strong understanding of relevant national and international laws, regulations, and ethics, especially as they relate to the financial industry.
 - Understand the roles and interdependencies between enterprise and solution architecture.
 - Apply experience from both operational and transformational cybersecurity roles within large-scale IT transformation programs.
 - Leverage 3+ years of hands-on experience with Hashicorp Vault (preferably on-premises) and Terraform, including complex module design and build.
 - Lead Vault integration, especially around Secret Engines and authentication methods, and drive root cause investigations and service efficiency improvements.
 - Design and implement workload identity frameworks and define secrets management strategies for large enterprises.
 - Enable federated identity management and single sign-on across multiple organizations or domains.
 - Implement and manage Privileged Access Management (PAM) solutions, securing and monitoring privileged user access.
 - Deploy secure authentication protocols such as Kerberos, OAuth, and SAML.
 - Hold a degree or have relevant professional experience in cybersecurity, computer science, software engineering, or a related field.
 - Possess preferred certifications such as CISSP, CISM, SABSA, or TOGAF.
 - Demonstrate high proficiency in Jira for project and task management, and working proficiency in Confluence for documentation.