1 to 25 of 55 Secrets Management Jobs in London

diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures—and business purpose. We work in a uniquely collaborative model across the firm and throughout … across both Human and Agentic identity domains. This role owns the end-to-end identity lifecycle, from modernising enterprise directory services and privileged access management to pioneering the design of next-generation agentic AI identity management frameworks that will define how BCG secures autonomous agents and non-human ...

verification, observability pipelines, and secure orchestration capabilities across a global estate. You will work across Python, PostgreSQL, Git based workflows, Jenkins pipelines, Ansible orchestration, secrets management, artefact management, and observability tooling to build resilient, auditable and scalable automation services. Key Responsibilities Automation Engineering & Orchestration Design and build … Integration Build and maintain pipelines in GitHub and Jenkins (including Groovy-based pipeline development). Embed automated compliance checks and quality gates. Integrate artefact management via Nexus Repository. Support Git based workflow design (branching strategy, pull requests, code reviews, tagging and release patterns). Observability & Monitoring Design dashboards ...

verification, observability pipelines, and secure orchestration capabilities across a global estate. You will work across Python, PostgreSQL, Git based workflows, Jenkins pipelines, Ansible orchestration, secrets management, artefact management, and observability tooling to build resilient, auditable and scalable automation services. Key Responsibilities Automation Engineering & Orchestration Design and build … Integration Build and maintain pipelines in GitHub and Jenkins (including Groovy-based pipeline development). Embed automated compliance checks and quality gates. Integrate artefact management via Nexus Repository. Support Git based workflow design (branching strategy, pull requests, code reviews, tagging and release patterns). Observability & Monitoring Design dashboards ...

verification, observability pipelines, and secure orchestration capabilities across a global estate. You will work across Python, PostgreSQL, Git based workflows, Jenkins pipelines, Ansible orchestration, secrets management, artefact management, and observability tooling to build resilient, auditable and scalable automation services. Key Responsibilities: Automation Engineering & Orchestration: Design and build … state handling in PostgreSQL. Implement run state tracking, job history retention, and audit evidence capture. Optimise queries and data handling for operational reliability. Security & Secrets Management: Implement secure secret handling using HashiCorp Vault. Integrate Vault with CI/CD and AAP workflows. Apply least privilege principles and secure ...

models, prompts and configuration. Supporting the integration of cloud, AI and automation services with enterprise systems. Applying DevOps and MLOps principles across testing, release management and controlled deployment. Using automation and scripting to improve deployment, integration and operational processes. Monitoring service performance, availability, reliability, quality, usage and cost. Implementing … appropriate identity, access, secrets management and security controls. Supporting incident resolution, troubleshooting and root-cause analysis. Helping establish monitoring, alerting, backup, recovery and service operating procedures. Optimising cloud consumption, platform subscriptions, licensing and capacity. Creating reusable templates, documentation and self-service capabilities for technical teams. Working with security ...

clear vision for how systems connect, share data, and enable business capabilities. Lead or support the evaluation of integration platforms and tooling (API management, event streaming, iPaaS, middleware), providing clear recommendations, reference architectures, and evidence to inform investment decisions. Assess the current integration estate with technical rigour, identify … e.g. Apache Kafka, Amazon SQS/SNS, Amazon EventBridge), batch and near-real-time data exchange, and EDI. Architect API gateway strategy - including lifecycle management, versioning, consumer experience, and throttling - ensuring APIs are treated as products, not just interfaces (e.g. Amazon API Gateway, Kong, or equivalent). Ensure ...

speed and consistency of security delivery. Key Responsibilities: Cloud Security Engineering Build and maintain reusable cloud security guardrails for identity, logging, encryption, network segmentation, secrets management, storage, workloads, containers, serverless services, and data protection. Translate security architecture standards into deployable cloud patterns, reference implementations, templates, and engineering-ready …/CD pipelines, infrastructure-as-code workflows, and operational processes. Support the implementation and tuning of CSPM, CNAPP, cloud workload protection, IaC scanning, secrets scanning, and related cloud security tooling. Develop policy-as-code and control-as-code mechanisms to prevent, detect, and report common cloud misconfigurations. Support cloud ...

/CD pipelines using GitHub and Jenkins, including Groovy-based pipeline development. Embed automated compliance checks, quality gates and verification controls. Integrate artefact management through Nexus Repository. Support Git workflows, branching strategies, pull requests, code reviews and release management. Observability & Monitoring Develop Grafana dashboards and telemetry pipelines. Integrate logging … such as Splunk. Build dashboards for compliance monitoring and configuration drift detection. Produce structured reporting to support operational governance and audit requirements. Data & State Management Design PostgreSQL schemas to support automation state, job history and operational reporting. Implement execution-state tracking, job history retention and audit evidence capture. Optimise ...

looking for an experienced IAM Design SME to join a major transformation programme at a leading UK bank, delivering next-generation Identity and Access Management (IAM) capabilities. This is a high-impact opportunity to take technical ownership of identity architecture, define secure cloud-native solutions and influence how identity … service mesh environments. Defining secure API, service-to-service authentication and event-driven integration patterns. Designing Policy-as-Code, PKI, certificate lifecycle and secrets management solutions. Driving architecture governance, design assurance and technical decision-making across multiple workstreams. Working closely with architects, engineering teams and senior stakeholders ...

cause analysis Support incident response and service restoration activities Work closely with Security teams to ensure services remain secure and compliant Support certificate lifecycle management, access controls and secrets management Collaborate with architects, engineers and third-party suppliers Create and maintain technical documentation, runbooks and operational processes … skills with both technical and non-technical stakeholders Ability to work independently while collaborating across technical teams Desirable Experience API security experience Certificate lifecycle management PKI, TLS/mTLS and certificate-based authentication OAuth, OpenID Connect (OIDC) and JWT/JWKS concepts Secrets and credential management Site ...

path to live. What you'll do * Design and continuously improve secure, automated CI/CD and GitOps pipelines * Embed security scanning, vulnerability management and secrets management into delivery workflows * Establish secure-by-design engineering practices and enforce security and technical standards * Lead Infrastructure as Code … with strong hands-on engineering and technical leadership experience across: * CI/CD & GitOps: GitHub Actions, Argo CD, Argo Rollouts * Security & Compliance: Trivy, vulnerability management, HashiCorp Vault, cert-manager * Containers & Cloud: Docker, AWS EKS, AWS IAM, S3 and network policies * Infrastructure as Code: Terraform * Observability: Grafana, Loki * Automation: Python ...

Housing, Communities and Local Government, UEFA, International Olympic Committee, and Mercedes-Benz. Our services span the full digital delivery lifecycle, including architecture, engineering, delivery management, user-centred design, business analysis, data, DevOps, and AI. We operate as a collaborative and inclusive organisation that empowers our people to take ownership … tools. Develop, maintain and optimise CI/CD pipelines using tools such as GitLab CI, Jenkins, GitHub Actions or Cloud Build. Automate deployment, configuration management and operational processes using scripting languages such as Python, Bash or PowerShell. Manage GCP services, including Google Kubernetes Engine (GKE), Compute Engine, Cloud Storage ...

DevOps, cloud engineering, and automation with a focus on reliability, observability, and scalability. Youll also work with event driven technologies, identity and access management, and data platforms, ensuring their orchestration solutions are resilient, secure, and future-ready. This is an exciting opportunity for an engineer who thrives on solving … Kafka or similar messaging systems Operate and maintain databases and data platforms such as PostgreSQL, Elasticsearch, and MongoDB Configure and support identity and access management (IdAM) solutions such as Keycloak Monitor system health, performance, and capacity using modern observability stacks (Prometheus, Grafana, ELK, OpenTelemetry) Champion DevSecOps practices, embedding security ...

DevOps, cloud engineering, and automation with a focus on reliability, observability, and scalability. Youll also work with event driven technologies, identity and access management, and data platforms, ensuring their orchestration solutions are resilient, secure, and future-ready. This is an exciting opportunity for an engineer who thrives on solving … Kafka or similar messaging systems Operate and maintain databases and data platforms such as PostgreSQL, Elasticsearch, and MongoDB Configure and support identity and access management (IdAM) solutions such as Keycloak Monitor system health, performance, and capacity using modern observability stacks (Prometheus, Grafana, ELK, OpenTelemetry) Champion DevSecOps practices, embedding security ...

SaaS platforms, containers, serverless workloads, virtual machines, storage, databases, APIs, and supporting network services. Assess cloud architectures and configurations for identity, network exposure, encryption, secrets management, key management, logging, resilience, data protection, and secure administrative access. Lead technical investigations involving cloud identities, service principals, managed identities, workload … protection processes, including platform onboarding, control baselining, finding validation, risk prioritization, remediation tracking, exception handling, and integration with governance processes. Support vulnerability and exposure management across internet-facing assets, cloud workloads, applications, containers, and SaaS services using available posture, vulnerability, attack-surface, and threat data. Perform security reviews ...

where appropriate to improve efficiency and quality. Embed security and governance: Implement policy-as-code, automated security and quality gates, change controls, SAST, DAST, secrets management and vulnerability management throughout the SDLC.Engineer cloud-native solutions: Build and integrate services across Azure, Kubernetes and Azure API Management … support knowledge transfer, with an interest in applying approved AI tools and automation responsibly to improve engineering outcomes. Bonus Points ForExperience integrating Azure API Management with cloud-native platforms and enterprise applications. Familiarity with Snowflake, Salesforce and engineering patterns supporting data-intensive workloads. Experience migrating from Jenkins, SonarQube, Artifactory ...

business. Purpose of Role looking for a highly experienced PKI Security Engineer to lead the design, implementation and phased rollout of a Certificate Lifecycle Management (CLM) platform across EMEA. This will establish automated certificate discovery and lifecycle controls, integrate the platform with enterprise PKI and technology services, and progressively … orphaned, expired, weak or manually managed certificates. * Define monitoring, alerting, dashboards, audit evidence, KPIs/KRIs and integration with security monitoring and IT service-management processes. * Perform technical evaluation, testing and troubleshooting of CLM capabilities, connectors and integrations, including production-readiness and scalability assurance. * Support cryptographic discovery and inventory ...

engineering leverage and about control. Duties and Responsibilities Pipeline and delivery architecture: Define the reference CI/CD architecture: branching model, build standards, artefact management, environment promotion, release patterns and rollback. Drive convergence of fragmented toolchains onto a supported, paved-road platform, with a clear deprecation path for legacy … pipelines. Establish deployment and change automation that satisfies audit and change-management requirements without manual gates. Test automation: Own the test automation strategy across unit, integration, contract, end-to-end, performance and resilience testing. Define test data management architecture, including masking, synthetic generation and environment refresh. Set coverage ...

testing, AI evaluations, CI/CD pipelines, quality controls, repeatable deployments and rollback procedures. Lead secure and reliable production delivery, including access controls, secrets management, observability, performance, resilience, troubleshooting, Agile ceremonies and stakeholder alignment. About You Extensive hands-on full-stack software engineering experience, with strong software design ...

Skills and Competencies Familiarity with cloud services and platforms such as Amazon Web Services, Google Cloud Platform, or Microsoft Azure Experience with source code management systems such as GitHub, Bitbucket, or GitLab Basic knowledge of Linux-based operating systems and a willingness to expand technical expertise Exposure to containerization … technologies, including Docker Understanding of cloud and DevOps security concepts, including access controls, secrets management, and least privilege principles Familiarity with continuous integration and continuous deployment tools such as Jenkins, GitHub Actions, or CircleCI is preferred Exposure to Infrastructure as Code tools such as Terraform or AWS CloudFormation ...

with AWS services such as: EC2 ECS/EKS Lambda API Gateway RDS/Aurora DynamoDB S3 CloudWatch IAM VPC Route53 SQS/SNS Secrets Manager Experience designing resilient, scalable, secure, and highly available cloud solutions. Strong experience with Infrastructure-as-Code using Terraform and/or CloudFormation. Experience ...

provisioning using Bicep and/or Terraform. Implement secure identity and access patterns using Microsoft Entra ID, managed identities, role-based access control and secrets management. Design data access and integration using Azure SQL/SQL Server, Entity Framework Core, RESTful APIs, messaging and event-driven patterns where appropriateDevSecOps … design, asynchronous programming, dependency injection, testing and performance optimisation. Strong commercial experience with React and/or Angular and TypeScript, including component design, state management, accessibility and front-end testing. Hands-on Azure application development experience across relevant compute, integration, data, identity, security and monitoring services. Strong knowledge ...

Entra Connect, Conditional Access, MFA, PIM and RBAC Microsoft Defender for Cloud and Defender XDR, Sentinel, secure score remediation Key Vault, encryption, certificate and secrets management Azure Policy, management groups, landing zone and governance design (Cloud Adoption Framework/Well-Architected Framework) Migration and modernisation Discovery … Code Bicep, ARM or Terraform PowerShell scripting and Azure CLI; Azure Automation, Update Manager, Logic Apps Azure Monitor, Log Analytics, alerting, dashboards and cost management/FinOps Responsibilities Running workshops and discovery sessions with technical and non-technical stakeholders Producing HLDs, LLDs, as-built documentation and handover to internal ...

Entra Connect, Conditional Access, MFA, PIM and RBAC Microsoft Defender for Cloud and Defender XDR, Sentinel, secure score remediation Key Vault, encryption, certificate and secrets management Azure Policy, management groups, landing zone and governance design (Cloud Adoption Framework/Well-Architected Framework) Migration and modernisation Discovery … Code Bicep, ARM or Terraform PowerShell scripting and Azure CLI; Azure Automation, Update Manager, Logic Apps Azure Monitor, Log Analytics, alerting, dashboards and cost management/FinOps Responsibilities Running workshops and discovery sessions with technical and non-technical stakeholders Producing HLDs, LLDs, as-built documentation and handover to internal ...

Python-based AI applications, APIs, microservices and cloud-native integrations.Define engineering standards covering source control, automated testing, CI/CD, infrastructure as code, secrets management and release management.Provide technical direction across orchestration, tool calling, retrieval-augmented generation, structured outputs, context management and asynchronous workflows.Ensure solutions are modular … orchestration.Design operational monitoring across agent workflows, including tracing, logging, performance, tool-call outcomes and cost.Define failure handling, retries, timeouts, fallbacks, human approval and exception-management patterns.Ensure solutions address identity, access control, data protection, content safety, auditability, responsible AI and regulatory requirements.Work with architecture, security, risk, legal and privacy stakeholders ...