Secret Management

Technical Expert for Secret Management & Machine Identity: Freelance- 12M - Jan 2027 Start- Hybrid - UK or Paris on site.

Transforming its Identity and Access Management landscape from legacy, on-premises identity solutions to a modern, cloud-enabled security platform.

As part of this transformation, the Privileged Access Management (PAM) and Secret Management program is evolving into a global service supporting:

• Human privileged access
• Machine and application identities
• Secrets and credential lifecycle management
• Public cloud privileged access controls
• DevSecOps and CI/CD integrations
• Operational Technology (OT) and manufacturing environments
• Vendor and third-party remote access

The Secret Management Lead Engineer will provide technical leadership for the design, implementation, integration, testing, and operationalization of enterprise PAM and secrets management services. The role works closely with IAM architects, PAM engineers, cloud teams, application owners, OT security teams, and operations teams to deliver secure and scalable privileged access controls across the enterprise.

Key Responsibilities

• Translate HLD/architecture decisions into Low-Level Designs and configuration specifications
• Act as SME and technical authority for secret management and machine identities.
• Define standards for secrets, certificates, API keys, tokens, and non-human identities.
• Establish secure storage, access, rotation, and monitoring of credentials, API keys, certificates, tokens, and secrets.
• Hands-on experience integrating secret management platforms with CI/CD pipelines, Kubernetes/OpenShift, cloud-native services, and enterprise applications
• Lead complex technical investigations and resolve platform-level issues related to secrets, machine identities, certificates, and privileged credentials
• Drive automation using APIs, PowerShell, Python, and adopting IaC (Infrastructure as Code) practices.
• Follow change control (CAB, implementation/back-out plans, risk assessment) for all production changes.
• Deliver operational handover packages: runbooks, SOPs, onboarding guides, monitoring/KPIs, training for operations.
• Mentor engineers: support (ISO 27001, NIS2, IEC 62443) and provide L3 expertise.

Required Profile

• 8+ years in IAM, PAM, Cybersecurity, and Platform Engineering
• 5+ years in Secret Management, Machine Identity, or PAM solutions.
• Experience with global enterprise deployments and cloud transformation.
• Experience managing more than 5,000 secrets and supporting enterprise-scale secret consumption patterns across cloud, infrastructure, DevSecOps, and application environments
• Experience in structured programmes: LLD authoring, test documentation, ITIL change management, handover to operations.
• Autonomous, delivery-focused, clear communicator, application owners, and OT teams.