IAM Security Engineer (Hashicorp), Global Financial Institution

Overview

Our client is a leading Global Financial Institution with a significant technology and cybersecurity presence in Singapore. As part of continued investment in identity security and secure infrastructure, the organisation is strengthening its capabilities around machine identities, privileged credentials and enterprise secrets management. This is a senior individual-contributor opportunity for an experienced security engineer who enjoys building secure platforms, automating controls and partnering with engineering teams across a complex technology environment.

Role

You will take a key engineering role in developing and scaling an enterprise secrets-management capability, with HashiCorp Vault forming a central part of the technology stack. The position covers architecture, implementation, security hardening, automation and integration across cloud, Kubernetes, applications and delivery pipelines. You will establish reusable approaches for workload authentication, credential issuance and rotation, while helping development teams transition away from embedded or long-lived credentials. The role is highly hands-on and will also involve Infrastructure-as-Code, platform reliability, secure machine-to-machine authentication, and the development of appropriate identity controls for increasingly automated and AI-enabled workloads.

Requirements

• At least 3 years of substantial hands-on experience with HashiCorp Vault in production environments, ideally including Vault Enterprise and involvement in designing or delivering a new implementation at organisational scale.
• Strong practical knowledge of Vault architecture, authentication mechanisms, secrets engines, access policies, namespaces, high availability, disaster recovery, dynamic credentials, PKI and platform security.
• Demonstrated engineering experience with Terraform and Ansible, together with Kubernetes and at least one major public-cloud platform such as AWS, Azure or GCP.
• Strong DevOps and automation background encompassing Git-based workflows, CI/CD, APIs and scripting, with experience integrating secrets management securely into application and infrastructure delivery processes.
• Good understanding of workload and non-human identity security, including short-lived credentials, least-privilege access and automated credential lifecycle management; exposure to AI-assisted engineering or securing autonomous/AI workloads would be advantageous.

To Apply

Interested candidates, please submit your resume to Grace Lim at [Confidential Information]. We regret to inform that only successful shortlisted candidates will be notified. License No: 16S8060 Registration no: R1988923