Identity & Access Management

• 3 years+ experience working in a Hashicorp Vault environment (on-prem preferred)
• 3 years+ in using Hashicorp Terraform including designing and building of complex modules
• In-depth real-world experience in Vault integration specifically navigating Secret Engines and Authentication methods resulting in robust and reusable patterns for consumption
• Ownership of root cause investigation into Vault integration problems, defining the monitoring of usage trends and creating efficiencies in the service
• Experience of designing or implementing Workload Identity Frameworks within large scale enterprises
• Capable of defining secrets management strategy and influencing the future direction of secrets management within the bank
• Federated Identity Management: Enabling identity sharing and single sign-on across different organisations or domains.
• Privileged Access Management (PAM): Securing, controlling, and monitoring access to critical systems by privileged users.
• Authentication Protocols: Implementing secure authentication mechanisms like Kerberos, OAuth, and SAML.
• Privileged Access Management (PAM): Securing, controlling, and monitoring access to critical systems by privileged users.
• Authentication Protocols: Implementing secure authentication mechanisms like Kerberos, OAuth, and SAML.

Qualifications & Certifications:

• Degree or work experience directly in cybersecurity, computer science, software engineering, or related field
• CISSP/CISM certification or other broad cybersecurity industry-recognised certificate preferred
• SABSA or TOGAF certified preferred

Platform & Technology:

• High proficiency and expertise in Jira for project & tasks management
• Working proficiency in Confluence for documentation and JIRA for task management

Principal Accountabilities and Responsibilities

Architecture & Design:

• Produce, manage, and update end-to-end solution designs in line with reference architecture & business requirements
• Articulate and publish key design decision records and options to ensure all solutions follow a logical, transparent decision-making process
• Articulate, publish, and ensure approval of any design deviations resulting in technical debt
• Ensure any technical risks or issues arising from a solution design are recorded and mitigated.
• Produces, manages and translates the requirements into the architecture for that solution, ensuring technology and services meet the customer needs and expected business outcomes
• Ensures the design of the solutions are efficient, timely and cost effective throughout the project lifecycle
• Clear understanding of both the motivations of the business and technical security
• Promote strong documentation and clerkship

Governance:

• Ensures all high-level designs, architecture patterns, decision records, deviation requests, and technical risks or issue records undergo architectural and project governance processes
• Ensure all architecture artefacts undergo appropriate peer review prior to design authority presentation
• Present publications at technical design authorities for input, feedback, and approval

Risk and Dependency Management:

• Effectively manages and escalates both technical and project risks or issues
• Articulates solutions and remediation steps to technical risks & issues
• Ability to map design decisions to resultant technical risks & issues to articulate the cause and rationale which leads to any negatively impacting change

Leadership & Teamwork

• Provides technical thought leadership in their domain of expertise
• Willingness and ability to work across information technology as a cybersecurity SME
• Ability to manage a project team of technical architects, engineers, and/or analysts
• Ability to take a deputised role in programme management-related tasks where necessary

All profiles will be reviewed against the required skills and experience. Due to the high number of applications we will only be able to respond to successful applicants in the first instance. We thank you for your interest and the time taken to apply!