{"id":3264464,"url":"https://alion.io/job/gic-vp-iam-platform-engineer-secrets-management-authorization-technology-group","title":"VP, IAM Platform Engineer (Secrets Management & Authorization), Technology Group","company":{"id":2761,"name":"GIC","domain":"gic.com.sg","url":"https://alion.io/company/gic","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":"head","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":56000,"max_usd":143000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":174},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon EKS","optional":false},{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"CyberArk","optional":false},{"name":"GCP","optional":false},{"name":"Git","optional":false},{"name":"GitHub","optional":false},{"name":"GitHub Actions","optional":false},{"name":"Go","optional":false},{"name":"HashiCorp Vault","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"PKI","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Terraform","optional":false},{"name":"Vault","optional":false}],"status":"live","first_seen_at":"2026-10-26T08:12:52Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-10-27T01:07:42Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"GIC is one of the world’s largest sovereign wealth funds. With over 2,000 employees across 11 locations around the world, we invest in more than 40 countries globally across asset classes and businesses. Working at GIC gives you exposure to an extraordinary network of the world’s industry leaders. As a leading global long-term investor, we Work at the Point of Impact for Singapore’s financial future, and the communities we invest in worldwide.\nTechnology Group\nWe experiment, design, and lead a 24×7 global business where we support core capabilities in asset management, trading, investment operations, and risk management. We deliver secure, reliable, and integrated solutions, and provide insights on new, and emerging technologies.\nInfrastructure & Cybersecurity Resilience (ICR)\n We design, build, and secure the technology foundations that power GIC’s global investment operations. We aim to deliver resilient, scalable, and secure infrastructure that empowers our people and businesses to perform securely, efficiently, and effectively.\nWhat impact can you make in this role?\nYou’ll be empowered to be at the top of your game by providing strategic partnership, and innovative technology solutions that support GIC’s vision of being a tech-driven, global, long-term investment firm. In this hands-on role within IAM Engineering, you will lead the new build and organisation-wide rollout of two IAM platforms: a HashiCorp Vault platform for secrets management, followed by a central Authorization Engine that decides access based on policy (PBAC).\nWhat will you do as a VP, IAM Platform Engineer (Secrets Management & Authorization)?\nLead GIC’s new HashiCorp Vault implementation end to end, from reference architecture and high-availability/disaster-recovery design through production readiness and phased rollout.\nDesign and operate Vault’s secrets engines, auth methods and policies to replace hard-coded, long-lived credentials with dynamic, short-lived ones. This includes migrating existing secrets and fixing exposed secrets found by Vault Radar.\nHelp design and build the Authorization Engine, a central service that applications call for access decisions, with policies written, tested and released as code. Grow into its technical ownership.\nBuild Kubernetes and AWS integrations and standard patterns for teams to follow. Drive adoption through self-service onboarding, reusable modules and adoption metrics.\nManage both platforms as code through Terraform, Ansible and GitHub CI/CD, and own their reliability as business-critical (Tier-0) security services. Use AI coding tools in engineering work, with human review and guardrails.\nDirect implementation vendors and service partners, hold them to GIC’s standards, and ensure knowledge transfer so GIC can run both platforms independently.\nWhat qualifications or skills should you possess in this role?\nBachelor’s Degree in Computer Science, Computer Engineering, Information Technology or equivalent.\nAt least 10 years of relevant experience, preferably in financial services or asset management industries, with minimum 5 years in IAM or secrets management engineering.\nDeep, hands-on HashiCorp Vault expertise in production, ideally including at least one new implementation taken from design to organisation-wide rollout. Specifically:Secrets engines (KV v2, database, PKI, Transit, SSH, AWS) and auth methods (AppRole, JWT/OIDC, Kubernetes, AWS IAM)\nHigh-availability/disaster-recovery design, hardening, and Vault Enterprise features (Sentinel, namespaces, replication)\nKubernetes integration (Vault Agent injector, CSI Secrets Store driver)\n\nFoundational understanding of policy-based authorization: how central decision and enforcement points work together (PDP/PEP), policy-as-code, and attribute-, role- and relationship-based access models. Exposure to a platform such as PlainID, PingAuthorize, OPA/Styra or Cerbos, and a strong appetite to deepen this on the job.\nStrong in Terraform (including the Vault provider), Ansible, Git and GitHub Actions, and Kubernetes and AWS at scale (IAM, EKS, IRSA/Pod Identity, KMS).\nGood understanding of OAuth2, OIDC, JWT, PKI and cryptography basics.\nScripting and coding skills in Python, Go or Bash, with good understanding of REST APIs.\nTrack record of driving adoption of a platform across many teams, and of leading vendors through complex implementations while keeping ownership in-house.\nWorking knowledge of AI coding agents and LLM tools. Experience with Azure/GCP secrets services or CyberArk would be advantageous.\nHashiCorp Vault or Terraform, AWS, CKA, or PlainID/PingAuthorize certifications are a plus.\nClear communicator who can explain secure patterns to engineering teams, and is pragmatic in balancing security with developer experience and speed of delivery.\nWork at the Point of Impact\nWe need to be forward-looking to attract the right people to help us become the Leading Global Long-term Investor. Join our ambitious, agile, and diverse teams - be empowered to push boundaries and pursue innovative ideas, share your views, and be heard. Be anchored on our PRIME Values: Prudence, Respect, Integrity, Merit and Excellence, which guides us in how we make our day-to-day decisions. We strive to inspire. To make an impact.\nGIC is a Great Place to Work\nAt GIC, our offices are vibrant hubs for ideation, professional growth, and interpersonal connection. At the same time, we believe that flexibility allows us to do our best work and be our best selves. Thus, our teams come into the office four days per week to harness the benefits of in-person collaboration, but have the flexibility to choose which days they work from home and adjust this arrangement as situational needs arise.\nGIC is an equal opportunity employer\nAs an employer, we passionately believe every individual brings with them unique diversity of thought and perspectives to meaningfully enrich perspectives of GIC teams to drive competitive performance. An inclusive environment yields exceptional contribution.\nLearn more about our Technology Group here:\nhttps://gic.careers/group/technology-group/","description_format":"text","description_chars":6111,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Pension & Sovereign Wealth Funds"],"lifecycle":[{"event":"open","at":"2026-10-26T08:12:52Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":24,"reasons":["conf:2","win:early"],"computed_at":"2026-10-27T03:13:40Z"},"pay":null,"html_url":"https://alion.io/job/gic-vp-iam-platform-engineer-secrets-management-authorization-technology-group","json_url":"https://alion.io/job/gic-vp-iam-platform-engineer-secrets-management-authorization-technology-group.json","meta":{"generated_at":"2026-10-27T03:13:40Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2674,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2761},"rest":"https://alion.io/mcp/rest/get_company?id=2761"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgic-vp-iam-platform-engineer-secrets-management-authorization-technology-group"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgic-vp-iam-platform-engineer-secrets-management-authorization-technology-group"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgic-vp-iam-platform-engineer-secrets-management-authorization-technology-group"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/gic-vp-iam-platform-engineer-secrets-management-authorization-technology-group\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgic-vp-iam-platform-engineer-secrets-management-authorization-technology-group"}]}