AVP, Non-Human Identity Security Engineer (IAM Secrets Management)

About the role

DBS Group Technology is looking for an experienced Security Engineer with a strong application development background to design, build and implement secure solutions in Identity and Access Management (IAM), focusing on secrets management. The role covers secure integration of applications and platforms, operational support for resilient systems, and partnership with teams to deliver secure-by-default services at enterprise scale. The position is based at the DBS Asia Hub.

Key responsibilities

• Design, build, test, operate and continuously improve enterprise IAM security solutions covering secrets such as API and SSH keys and SSL/TLS certificates across application environments.
• Operate highly available, resilient platforms for secrets management, workload identity and service-to-service authentication.
• Manage secrets management solutions, including authentication methods, secret engines, policy management, audit logging, replication, backup, disaster recovery and platform upgrades.
• Integrate applications, APIs, microservices, batch workloads, containers, CI/CD pipelines and cloud-native platforms with IAM services using secure, automated patterns.
• Build automation, reusable tooling, APIs, scripts and Infrastructure as Code to speed up secure application onboarding.
• Support critical security platforms: monitoring, incident response, troubleshooting, escalation, root-cause analysis and preventive actions.
• Work with application development, DevOps, cloud, risk, audit and security operations teams to embed application security and IAM controls into development lifecycles.
• Maintain operational documentation, architecture diagrams, runbooks, control evidence, service metrics and knowledge articles.

Required profile

• Bachelor's degree in Computer Science, Information Security, Engineering or equivalent practical experience.
• At least 7 years of relevant experience in application security, security engineering, software development or IAM, with at least 3 years of hands-on experience in secrets management, machine/non-human identity, PKI or service-to-service authentication.
• Proven experience in requirements gathering, secure solution design, integration testing, performance testing, change implementation and production support.

Required skills

• Java and at least one scripting or automation language (e.g. Python, JavaScript/Node.js, Go, shell).
• Hands-on experience with enterprise secrets management solutions and resilient application systems (clustering, failover, DR, observability).
• Secure API design, cryptography, TLS/SSL, certificates, SSH keys, OAuth/OIDC, JWT, SAML, workload identity.
• CI/CD pipelines, Infrastructure as Code, Kubernetes/Docker, and cloud services (AWS, Azure, GCP).
• Non-human identity lifecycle governance, secure coding, threat modeling and policy-as-code.