Design Engineer - HashiCorp Vault/Identity & Access Management (IAM)

Project overview

Job Title: Design Engineer - HashiCorp Vault/Identity & Access Management (IAM)

Project details

Sheffield, UK - Hybrid (2 days per week onsite)

Contract Type: Contract

Up to £550 per day

Sector: Banking/Financial Services

Job Overview

We are seeking an experienced Design Engineer with strong expertise in Cybersecurity, Identity & Access Management (IAM) and HashiCorp Vault to join a major financial services transformation programme.

You will be responsible for managing end-to-end solution design, producing high-level architecture designs and ensuring solutions align with business requirements, security principles and enterprise architecture standards.

The successful candidate will have substantial hands-on experience with HashiCorp Vault and Terraform, alongside the ability to define secure, scalable and reusable secrets management solutions within large-scale enterprise environments.

You will also work closely with technical architects, engineers, senior stakeholders and design authorities, providing technical leadership and guidance across key programmes.

Key Responsibilities

Essential Skills & Experience

HashiCorp Vault & Terraform

Identity & Access Management/Cybersecurity

Architecture & Leadership

Desirable Qualifications & Experience

Working Arrangements

Interested?

If you have strong HashiCorp Vault, Terraform and IAM architecture experience and are interested in this opportunity, please apply with your latest CV.

• Lead end-to-end solution design, producing high-level architecture and technical design documentation.
• Design and implement secure HashiCorp Vault integrations and secrets management solutions.
• Develop and maintain complex Terraform modules.
• Define and influence secrets management strategies and architectural patterns.
• Design and implement workload identity frameworks within enterprise environments.
• Work across Identity & Access Management, Privileged Access Management (PAM) and federated identity.
• Identify, document and mitigate technical risks, issues and design deviations.
• Present architectural solutions and design decisions to senior stakeholders and design authorities.
• Provide technical leadership and guidance to architects, engineers and project teams.
• Ensure solutions meet security, regulatory and business requirements.
• 3+ years' experience working with HashiCorp Vault, ideally within on-premise environments.
• 3+ years' experience using HashiCorp Terraform.
• Proven experience designing and building complex Terraform modules.
• Strong understanding of Vault integrations, Secret Engines and authentication methods.
• Experience troubleshooting Vault integration issues and improving service efficiency.
• Experience developing reusable secrets management patterns.
• Experience designing or implementing Workload Identity Frameworks.
• Strong understanding of Identity & Access Management (IAM).
• Experience with Privileged Access Management (PAM).
• Knowledge of federated identity and Single Sign-On (SSO).
• Understanding of authentication protocols including Kerberos, OAuth and SAML.
• Strong cybersecurity knowledge across areas such as infrastructure, network, cloud, application or data security.
• Experience producing high-level designs and end-to-end solution architecture.
• Ability to present technical solutions to senior stakeholders and design authorities.
• Experience working within large-scale IT transformation programmes.
• Strong understanding of enterprise and solution architecture.
• Excellent stakeholder management and communication skills.
• Experience managing technical risks, dependencies and design governance.
• Degree or equivalent professional experience in Cybersecurity, Computer Science or Software Engineering.
• CISSP, CISM or another recognised cybersecurity certification.
• SABSA or TOGAF certification.
• Experience within banking or financial services.
• Strong Jira and Confluence experience.
• Location: Sheffield, UK.
• Hybrid: 2 days per week working from the office.
• Day Rate: Up to £550 per day.
• Start: flexible
• Remote: hybrid
• Location: Yorkshire, United Kingdom, GB
• Rate: 69-69 EUR/h