Senior Associate, Non-Human Identity Security Engineer

About the role

Group Technology at DBS manages most of the bank's operational processes and delivers banking services through multiple channels. It is looking for an experienced Security Engineer with a strong application development background to design, build and implement secure solutions in Identity and Access Management (IAM), focusing on secrets management. The role covers secure integration of applications and platforms, operational support for resilient systems and partnership with teams to deliver secure-by-default services at enterprise scale.

Key responsibilities

• Design, build, test, operate and continuously improve enterprise IAM security solutions covering secrets such as API and SSH keys and SSL/TLS certificates across application environments.
• Operate highly available, resilient platforms for secrets management, workload identity and service-to-service authentication.
• Manage secrets management solutions, including authentication methods, secret engines, policy management, audit logging, replication, backup, disaster recovery and platform upgrades.
• Integrate applications, APIs, microservices, batch workloads, containers, CI/CD pipelines and cloud-native platforms with IAM services using secure, automated patterns.
• Build automation, reusable tooling, APIs, scripts and Infrastructure as Code to speed up secure application onboarding.
• Support critical security platforms: monitoring, incident response, troubleshooting, escalation, root-cause analysis and preventive actions.
• Work with application development, DevOps, cloud, risk, audit and security operations teams to embed application security and IAM controls into development lifecycles.
• Maintain documentation, architecture diagrams, runbooks, control evidence, service metrics and knowledge articles for audit readiness.

Required profile

• Bachelor's degree in Computer Science, Information Security, Engineering or equivalent practical experience.
• At least 7 years of relevant experience in application security, security engineering, software development or IAM, with at least 3 years hands-on in secrets management, machine/non-human identity, PKI or service-to-service authentication.
• Proven experience in requirements gathering, secure solution design, integration testing, performance testing, change implementation and production support.

Required skills

• Java and at least one scripting or automation language (Python, JavaScript/Node.js, Go or shell).
• Hands-on experience with enterprise secrets management solutions and resilient application systems (clustering, failover, DR, observability).
• Secure API design, cryptography, TLS/SSL, certificates, SSH keys, OAuth/OIDC, JWT, SAML and workload identity.
• CI/CD pipelines, Infrastructure as Code, Kubernetes or Docker, and cloud services on AWS, Azure or GCP.
• Non-human identity lifecycle governance, secure coding, threat modeling and policy-as-code.