Design Engineer

Overview

In this role you shape secure architectures and platform security capabilities. You will design and implement Vault-based secrets management and Terraform-driven infrastructure, aligning with IAM and workload identity strategies. You’ll work on large-scale IT transformations, assessing risks and governance while presenting solutions to design authorities and senior stakeholders. This is a hands-on, impact-focused opportunity to drive security across complex environments.

Responsibilities

• design secure architectures and security solutions
• deploy and optimize HashiCorp Vault and its secret engines/auth methods
• build and maintain complex Terraform modules
• manage secrets and workload identity frameworks
• implement IAM/PAM and federated identity strategies
• address technical risk, vulnerabilities, and governance
• contribute to large-scale IT transformation programmes
• present architectures and recommendations to Design Authorities and senior stakeholders
• utilize Jira and Confluence for planning and documentation

Key requirements

• 3+ years of hands-on HashiCorp Vault experience
• 3+ years of Terraform experience with complex module design/build
• strong experience with Vault secret engines and authentication methods
• secrets management and workload identity frameworks
• IAM / PAM / Federated Identity Management
• authentication protocols: OAuth, SAML, Kerberos
• cybersecurity/security architecture and solution design
• experience with technical risk, vulnerabilities and security governance
• experience with large-scale IT transformation programmes
• ability to present solutions to Design Authorities and senior stakeholders
• Jira & Confluence usage

• clear communication
• stakeholder management
• presentation to senior stakeholders
• HashiCorp Vault
• Terraform
• Vault secret engines and authentication methods

…