Principal Engineer - Secrets Management

Create your best future and join as a Principal Engineer – Secrets Management

As a Principal Engineer, you will lead the Bank’s enterprise secrets management strategy, driving the design, engineering and adoption of secure, scalable and automated solutions that protect critical credentials across on-premises, cloud and DevOps environments. You will define the technical direction for enterprise secrets management services, including Vault, machine identities, service accounts, certificates, keys and API secrets, while reducing cyber risk and enabling secure digital transformation across the organisation.

Additionally, you'll own the evolution of Vault as an enterprise security service, expand adoption across technology platforms, and drive initiatives to identify, scan and eliminate unmanaged secrets from repositories, applications and infrastructure. You will champion automation, improve resilience and observability, establish secure-by-default patterns, and embed secrets management into modern engineering practices across AWS, Azure, Kubernetes, OpenShift and CI/CD ecosystems.

You will provide technical leadership across governance, standards and control uplift, partnering closely with Identity, Privileged Access, Cloud and Platform Engineering teams. You will drive lifecycle automation, strengthen non-human identity security, and ensure alignment with regulatory obligations and enterprise security objectives.

• Deep expertise in Vault, Secrets Management, Privileged Access Management (PAM), and Identity & Access Management (IAM).
• Proven experience delivering and operationalising enterprise-scale Secrets Management programs within large and complex environments. 
• Strong hands-on security engineering experience across infrastructure, platforms, cloud, or DevSecOps environments. 
• Experience managing machine identities, service accounts, and non-human identity security. 
• Knowledge of PKI, certificate management, encryption keys, API secrets, and credential lifecycle management. 
• Exposure to AWS, Azure, CI/CD pipelines, automation, and platform engineering. 
• Strong stakeholder engagement skills with the ability to drive security uplift and large-scale transformation initiatives.