Senior IT Security Engineer/Solution Architect
First seen by Alion on Nov 6, 2026.
Summary: The Senior IT Security Engineer/Solution Architect role focuses on providing specialist expertise in IAM Secret Credential Management for Cyber Operations within Security, Risk & Control, particularly in support of the Expand Secure Credential Management programme.
PROJECT INFORMATION:
Industry: Banking
Working model: Hybrid (3 days per week from the office) or Remote from EU
Project language: English
Project length: 12 months + possible prolongation
Start: ASAP
Budget: up to 51 euro
Responsibilities:
Assess the current credential management environment.
Define the target state architecture and requirements.
Design controls and implementation approaches for AWS Secrets Manager.
Develop migration plans for AWS-native workloads.
Lead the full lifecycle of the platform, including discovery and inventory, proof of concept, and enterprise rollout.
Collaborate with IAM Platform, Operations, and other key stakeholders.
Produce Solution Design Documentation and obtain necessary approvals.
Establish IAM/workload identity and least-privilege patterns.
Design integration with IAM, CMDB, SIEM, CloudTrail, and ITSM/GRC.
Create operational documentation and knowledge-sharing materials.
Must Haves:
6-10 years of experience in technical architecture.
Extensive hands-on experience with HashiCorp Vault and AWS Secrets Manager.
Advanced understanding of OAuth.
Strong communication skills capable of engaging with diverse audiences.
Experience in software lifecycle and application development.
Proficient user of Confluence.
Nice to Haves:
Experience in financial services or highly regulated environments.
Familiarity with Privilege Access Management and other credential management tools.
Experience in designing and implementing enterprise IAM Secrets Credential management.
Background in delivering security transformations in complex environments.
Understanding of NIST, CIS Controls, ISO 27001, and PCI DSS standards.
Tech stack
- AWS Secrets Manager
- AWS
- IAM
- CMDB
- SIEM
- ITSM/GRC
- Hashicorp Vault
- oauth