1 to 25 of 47 Secrets Management Jobs in London

through automation, platform engineering and software development rather than policy, governance or compliance. You'll play a key role in designing and operating identity, secrets management and access platforms that support engineering teams at scale. Key Responsibilities Build and operate security platforms using Infrastructure as Code Design … automate identity, authentication and secrets management workflows Develop secure, reusable platform services for engineering teams Integrate security controls into cloud-native environments and CI/CD pipelines Support and troubleshoot production issues across infrastructure, applications and platforms Improve developer experience by making secure solutions easy to adopt Eliminate ...

data while also shaping how we scale IT and security together. What you'll do: Governance & Compliance Own and evolve Definely’s Information Security Management System (ISMS). Lead ISO 27001 and SOC 2 Type II audits, ensuring controls remain effective. Drive readiness for ISO/… modelling, define non-functional security requirements, and review designs for security impact. Guide security considerations in our AI/LLM-enabled products. Risk & Incident Management Own the company-wide incident response plan and lead tabletop exercises. Perform ongoing risk assessments, vendor security reviews, and DPIAs. Ensure strong access management ...

customers who have no tolerance for downtime or data compromise. Areas of Responsibility: Own the security posture of the Spaceflux platform: threat modelling, vulnerability management, penetration test remediation, and incident response. Design and maintain secure CI/CD pipelines, integrating SAST, DAST, dependency scanning, and container security tooling. Manage … cloud infrastructure (Azure) using infrastructure-as-code, with security controls, secrets management, and least-privilege access enforced by default. Lead on compliance requirements for UK Government programmes, including Cyber Essentials Plus, ISO 27001, and defence data handling standards. Work with engineering to define and enforce secure coding standards ...

plane mechanics, custom resource definitions (CRDs), and operators. (MUST) IaC: Terraform/Open Tofu module design. (MUST) Kubernetes Engineering: GitOps (Argo CD/Flux), secrets management, ingress/mesh, and OPA/Gatekeeper. (MUST) Observability: OpenTelemetry (MUST) Tooling: Spacelift, Atlantis, or Terraform Cloud (Desired) Governance: EPAC (Enterprise Policy … Proven experience building and architecting complex Kubernetes platforms from scratch. Experience with Kubernetes platform engineering, including ingress and service mesh, OPA/Gatekeeper policy, secrets management, and progressive delivery. Strong security awareness, displaying comfort with CAF/ALZ patterns, least-privilege IAM, network segmentation, and policy-as-code. ...

Guide BAU teams on adoption of identity technologies, patterns, and operational best practices. Contribute to advanced identity capabilities such as PKI, CIEM, machine identity, secrets management, and cross-tenant architectures. Experience Extensive experience as an Identity Architect delivering enterprise-scale IAM solutions. Deep expertise in Microsoft Entra … Azure, hybrid identity, authentication, authorisation, and federation models. Strong background in Privileged Access Management (PAM), Identity Governance (IGA), and identity resilience/recovery architecture. Proven experience designing and implementing Zero Trust identity models. Strong understanding of security controls, audit processes, risk management, and compliance frameworks (NIST ...

DevSecOps practices across the delivery teams, including: Secure, automated CI/CD pipelines Security scanning integrated into build, test and deployment workflows Vulnerability lifecycle management, including allowlist processes and risk acceptance where required Secrets management and identity/access management Policy enforcement for workloads, container images … leading others): CI/CD and GitOps (e.g. GitHub Actions, Argo CD, Argo Rollouts) Security and compliance tooling (e.g. Trivy scanning and vulnerability management, HashiCorp Vault, cert-manager) Containers and orchestration (e.g. Docker, AWS EKS) Infrastructure as Code (e.g. Terraform) Observability (e.g. Grafana, Loki) Scripting and automation (e.g. Python ...

DevSecOps practices across the delivery teams, including: Secure, automated CI/CD pipelines Security scanning integrated into build, test and deployment workflows Vulnerability lifecycle management, including allowlist processes and risk acceptance where required Secrets management and identity/access management Policy enforcement for workloads, container images … leading others): CI/CD and GitOps (e.g. GitHub Actions, Argo CD, Argo Rollouts) Security and compliance tooling (e.g. Trivy scanning and vulnerability management, HashiCorp Vault, cert-manager) Containers and orchestration (e.g. Docker, AWS EKS) Infrastructure as Code (e.g. Terraform) Observability (e.g. Grafana, Loki) Scripting and automation (e.g. Python ...

across Linux and Windows environments , including virtualised infrastructure Contribute to database administration (e.g. SQL Server or equivalent) where required Apply security best practices including secrets management and vulnerability scanning Support job scheduling and operational tooling such as Control-M Work across development tooling including Atlassian stack (Jira, Confluence ...

following: Multi-cloud deployments across GCP, AWS and Azure Kubernetes and container orchestration Infrastructure-as-code using Terraform Private networking and cloud security architecture Secrets management and encryption key management CI/CD pipelines using GitHub Actions Observability using OpenTelemetry (OTEL) and Grafana Workflow orchestration using Temporal ...

cloud security architecture, policies, procedures and incidents. Collaboration with cloud operation team to manage the bank’s cloud security infrastructure, including identity and access management (IAM), network security, and data security controls, to protect cloud resources from unauthorized access and data breaches. Director Expectations To manage a business function … guide and coach less experienced specialists and provide information affecting long‐term profits, organisational risks and strategic decisions, providing expert advice to senior functional management and committees to influence decisions made outside of own function, offering significant input to function wide strategic initiatives. Manage, coordinate and enable resourcing, budgeting ...

environments • Building and optimising CI/CD pipelines through CircleCI • Driving developer experience through internal tooling and platform improvements • Supporting security initiatives including IAM, secrets management and vulnerability management • Enhancing observability, monitoring and reliability using Datadog • Contributing to backend development across Go microservices • Optimising cloud cost, scalability ...

designing and building the security foundations of the cloud-native platform. This role owns the security reference architecture, cloud security posture, identity and access management strategy, data security (including tokenisation and encryption), and the technical standards that the entire engineering organisation builds upon. The pillar operates as an internal … cloud-native platform, including network security patterns, identity and authentication, encryption, logging, and inter-service communication security. Own the cloud security posture management (CSPM) strategy, ensuring continuous monitoring and automated enforcement of security policies across the entire cloud estate. Set and maintain security technical standards, including approved technologies, cryptographic ...

Doing Leading DevSecOps practices across multiple digital products Designing and improving secure CI/CD and GitOps pipelines Embedding security scanning, vulnerability management and compliance controls Driving Infrastructure as Code adoption and governance Implementing secrets management, IAM and policy enforcement Enhancing observability through monitoring, logging and audit ...

Doing Leading DevSecOps practices across multiple digital products Designing and improving secure CI/CD and GitOps pipelines Embedding security scanning, vulnerability management and compliance controls Driving Infrastructure as Code adoption and governance Implementing secrets management, IAM and policy enforcement Enhancing observability through monitoring, logging and audit ...

Pipeline Implementation Build and maintain CI/CD pipelines to automate build, test, and deployment processes, ensuring fast and reliable delivery. Environment Provisioning & Management Set up and manage environments (DEV, TEST, PPE, PROD), ensuring readiness, stability, and compliance with operational requirements. Cloud Platform Engineering Deploy and manage cloud resources … Azure preferred), including networking, compute, storage, and platform services. Security & Compliance by Design Implement security controls (identity, access, secrets management, network security) in line with CISO and GTS requirements . Monitoring, Observability & Reliability Ensure systems are observable and resilient by implementing logging, monitoring, alerting, and performance optimization. Release ...

/CD and automation tools: ArgoCD, Crossplane, GitHub Actions, Terraform, Ansible Strong understanding of cloud security best practices and tools such as Vault, AWS Secrets Manager, or HashiCorp Consul Experience with observability and monitoring tools (Prometheus, Grafana, ELK, Loki, Datadog) Solid understanding of networking, load balancing, DNS, and security ...

/CD pipelines. Integrate security scanning into build, test and deployment workflows. Manage vulnerability lifecycles, including allowlist processes and risk acceptance where required. Oversee secrets management and identity/access management. Enforce policy controls for workloads, container images and infrastructure. Support observability, monitoring, logging and audit controls. Partner …/CD and GitOps, such as GitHub Actions, Argo CD and Argo Rollouts. Experience with security and compliance tooling, including Trivy scanning, vulnerability management, HashiCorp Vault and cert-manager. Container and orchestration experience, including Docker and AWS EKS. Infrastructure as Code experience, particularly Terraform. Observability experience, including Grafana ...

experience with container orchestration (Kubernetes, Docker) - Proficiency in scripting and automation (Python, Bash, or similar) - Understanding of networking fundamentals, security best practices, and secrets management - Experience with monitoring and observability tools (e.g. Prometheus, Grafana, Elastic stack) Assignment Objectives - Implement or improve model monitoring and operational controls ...

production, including debugging it under load. Database operations — PostgreSQL migrations, RDS tuning, backups you’ve actually restored. Security and compliance: SOC 2, IAM hardening, secrets management, supply-chain hygiene, least-privilege as a default reflex. Scaling and cost work — Fargate vs Lambda trade-offs, autoscaling, spot fleets, capacity ...

month contract Rate: 600 - 800 per day Overview We are seeking an experienced PAM Process Automation Engineer to join a strategic Privileged Access Management (PAM) transformation programme. This role will focus on automating, standardising and optimising PAM processes across a complex enterprise environment, helping to strengthen security controls, improve … enjoys solving complex challenges, building scalable automation solutions and driving continuous improvement within a security-focused environment. Key Responsibilities Automate PAM asset lifecycle management activities, including account creation, modification, deletion, onboarding and offboarding. Design and implement automation solutions for CyberArk safes, permissions, platforms and privileged accounts. Develop and maintain ...

month contract Rate: 600 - 800 per day Overview We are seeking an experienced PAM Process Automation Engineer to join a strategic Privileged Access Management (PAM) transformation programme. This role will focus on automating, standardising and optimising PAM processes across a complex enterprise environment, helping to strengthen security controls, improve … enjoys solving complex challenges, building scalable automation solutions and driving continuous improvement within a security-focused environment. Key Responsibilities Automate PAM asset lifecycle management activities, including account creation, modification, deletion, onboarding and offboarding. Design and implement automation solutions for CyberArk safes, permissions, platforms and privileged accounts. Develop and maintain ...

with Terraform and cloud platforms (Azure preferred) Kubernetes: Experience managing containerised applications, including cluster troubleshooting, Helm, and GitOps workflows Security: Hands-on experience with secrets management tools (e.g., Vault, Azure Key Vault) and authentication systems (e.g., SSO, Okta) Observability: Experience with tools such as Datadog, Grafana, or Azure ...

office - because security engineers deserve joy too What we're looking for: Deep GCP security expertise and GKE hardening - IAM, network policies, runtime security, secrets management (not post-it notes) Infrastructure as Code with Terraform or OpenTofu, written securely Hands-on with CSPM/CNAPP tooling - Falco, Aqua ...

team responsible for designing and implementing cutting-edge security solutions across the business. This is a broad, hands-on role encompassing Identity and Access Management (IAM), device security, vulnerability management, and incident response - with a strong emphasis on building secure-by-default, zero trust environments at scale. … will have 5+ years of hands-on cybersecurity experience, with strong proficiency in IAM tooling such as Entra ID , Conditional Access, and Privileged Access Management (PAM), alongside solid exposure to cloud platforms including Azure and AWS . Candidates should be comfortable leading vulnerability management programmes, scripting in Python ...

multimodal reasoning; integrate via Vertex AI; grounding, structured output, function‐calling. Azure OpenAI/GPT‐4.x for enterprise LLM services; model selection, limits, rate management, content filters/AI safety. Amazon Q for developer and ops assistance across AWS stacks. Cursor, GitHub Copilot, Devin for IDE‐native agentic coding … policies for context windows, secrets hygiene, and traceability. NotebookLM/Gemini for research workflows where permitted; govern enterprise knowledge ingestion. Architecture & Integration Distributed systems, microservices, cloud‐native (Azure/AWS/GCP); secure API design (REST/GraphQL). MLOps & AIOps: CI/CD for AI, model lifecycle (eval ...