Job Description
- Experience with PAM solutions (CyberArk, Thycotic)
- Confluence, DevOps, SCRUM experience
- CI/CD tools (Jenkins, Harness)
- Hashicorp Vault experience
- 6+ years Enterprise Secrets Management experience
- Problem-solving & root cause analysis skills
- Independent work capability
- Effective communication skills
- Bash/Python scripting, Git experience
- AWS or Azure knowledge
Project description
A leading Australian bank has engaged us to build a dedicated team at their Offshore Development Centre. We are seeking an experienced Bash/ Python Engineer for a role in their Enterprise Secrets Management team.
Why does this role exist?
Poor controls and management of application secrets and access pose a significant risk to the bank as has been evidenced several times when misuse of such secrets has impacted customers.
Enterprise Secrets Management provide an enterprise-wide service that can be used to apply strong controls around the application secrets. The platform provides a standardized and policy-based approach to the management of 'Secrets' used in DevOps orchestrations and deployments undertaken by Application or Service teams. This service is built on the Hashicorp Vault product.
To achieve the goal of Keeping the Bank Safe, Security Services need to expand the scope of coverage of application secrets by Hashicorp Vault and its controls.
This role exists to provide Enterprise Secrets Management with the additional skills and experience necessary to support the aggressive expansion of the Hashicorp Vault service required in FY19 and beyond to Keep The bank Safe from misuse of application secrets.
Responsibilities
Contribute to the enhancement, uplift, and continuous improvement of the Hashicorp Vault service
Provide specialist Hashicorp Vault technical expertise, support, and advice to application teams
Contribute to development project-related activities and meetings to support delivery of project objectives
Perform technical problem diagnosis and use technical expertise to determine options and solutions for defects, issues, and improvements in the Hashicorp Vault system and related customizations and subsystems
Additional responsibilities:
Sustain own professional development and ensure all personal training records are maintained and kept up to date
Build effective relationships with colleagues, users, and suppliers which enable effective partnerships
Ensure compliance with all relevant standards, processes, and procedures
Work as an effective team member and recognize the contributions of others to ensure the achievement of team goals
Ensure that all work is performed in accordance with the requirements of the Health & Safety Policy, procedures, and legislation. Take reasonable care for own health & safety, as well as that of others
Demonstrate highest professional and ethical behaviour in own actions by ensuring compliance with external legislation, regulatory requirements, bank standards, and internal operating policies and procedures relevant to the position.
Participate in the broader security community
Skills
Must have
Minimum of 6+ years of experience in Enterprise Secrets Management
Absolutely MUST be a problem solver capable of analyzing problems to establish root cause and be able to produce a plan to fix
Absolutely MUST be able to work independently provided a reasonable amount of training and direction
Absolutely MUST be an effective communicator and have the poise to hold conversations with other service owners
Must be able to call out issues, blockers, and process deficiencies so that they can be addressed, and we can offer a better experience to our colleagues
Prior experience with scripting languages like bash and python is required.
Experience with version control systems like GitHub, Bit Bucket etc is required.
Technical knowledge of at least one of the Cloud Platforms specifically
AWS (Amazon Web Services) and Microsoft Azure.
Sound written and verbal skills
Ability to engage with technical project teams and clarify requirements
Proven ability to interact and communicate clearly and with influence on IT (Information Technology) architects, businesspeople, managers, and technical staff
Nice to have
Experience with other PAM (Privileged Access Management) solutions e.g., CyberArk, Thycotic, etc
Experience with the use of Confluence for documentation and collaboration
Experience using DevOps concepts and techniques including SCRUM
Prior experience with CI/CD tools like Jenkins, Harness, etc will be an added advantage.
Prior experience with Hashicorp will be beneficial
Other
Languages
English: B2 Upper Intermediate
Seniority
Senior
