AVP, Non-Human Identity Security Engineer, Information Security Services, Group Technology

Business Function

Group Technology empowers the bank with an efficient, nimble and resilient infrastructure and system through a strategic focus on productivity, quality & control, technology, coupled with strengthening people capability and banking on innovation. In Group Technology, we manage the majority of the Bank's operational processes and inspire to delight our business partners and customers through our multiple banking delivery channels.

Job Summary

We are seeking an experienced Security Engineer with a strong application development background to design, build, and implement secure solutions within the Identity and Access Management (IAM) space, focusing on secrets management. This role involves driving secure integration of applications and platforms, including providing operational support for highly resilient systems, and partnering with various teams to deliver secure-by-default services at enterprise scale.

Responsibilities

• Design, build, test, operate, and continuously improve enterprise security solutions for IAM involving secrets management (namely API and SSH keys, SSL/TLS certificates etc) across various application deployment environments.

• Engineer and operate highly available, resilient, and secure application-focused platforms for secrets management, workload identity and service-to-service authentication.

• Configure, manage, and support secrets management solutions and related technologies for applications, including authentication methods, secret engines, policy management, audit logging, replication, backup, disaster recovery, and platform upgrades.

• Integrate applications, APIs, microservices, batch workloads, containers, CI/CD pipelines, and cloud-native platforms with IAM services using secure, automated, and repeatable development patterns, with emphasis on secure API design and implementation.

• Develop robust automation, reusable tooling, APIs, scripts, and Infrastructure as Code to reduce manual effort, improve consistency, strengthen controls, and accelerate secure application onboarding.

• Provide operational support for critical security platforms, including monitoring, incident response, troubleshooting, escalation management, root-cause analysis, and implementation of preventive actions.

• Partner with application development, DevOps, cloud, risk, audit, and security operations teams to embed robust application security and IAM controls into software development lifecycles and delivery pipelines.

• Maintain operational documentation, architecture diagrams, runbooks, control evidence, service metrics, and knowledge articles to support audit readiness and sustainable operations for application security services.

Requirements