23 hours ago
Singapore (city not specified)Senior
Responsibilities
- Engineer and operate enterprise secrets-management patterns for applications, AI agents, workloads, service identities, and automation accounts.
- Integrate applications and CI/CD pipelines with vaults and secrets-management services, including automated credential retrieval, rotation, expiry, revocation, and recovery.
- Design and automate certificate lifecycle processes covering issuance, deployment, renewal, replacement, revocation, and expiry monitoring.
- Implement monitoring, alerting, audit logging, and security-event forwarding for secrets, certificates, identities, and integration health.
- Design SailPoint integration models for non-human and AI-agent identities, including ownership, provisioning, deprovisioning, access governance, certification, and evidence reporting.
- Integrate identity and secrets controls with cloud platforms, APIs, DevSecOps tooling, and enterprise applications.
- Perform production-readiness validation, maintain architecture and operational documentation, and support incident investigation and root-cause analysis.
- Drive automation and continuous improvement while collaborating with Cyber Security, Data Governance, PKI, PAM, IDAM/SailPoint, Cloud, and application teams.
- Transfer knowledge to BAU teams and ensure integrations are supportable before the end of the contract engagement.
Requirements
- Degree or diploma in Computer Science, Cybersecurity, Information Technology, Engineering, or equivalent practical experience.
- At least 8 years of hands-on engineering experience in two or more of secrets management/PAM, PKI/certificate lifecycle, IAM/IGA, DevSecOps automation, cloud security, or application security.
- Hands-on experience integrating applications or pipelines with enterprise vaults and automating credential retrieval and rotation.
- Practical PKI knowledge, including CSR, certificate chains, TLS, issuance, renewal, revocation, and automated deployment.
- Experience with REST APIs, scripting or automation, CI/CD integration, monitoring, audit logging, and security-event forwarding.
- Working knowledge of identity lifecycle, least privilege, RBAC, and non-human or service identity controls.
- Understanding of agentic AI security, workload identity, certificate automation, and audit evidence requirements.
- Relevant CyberArk, SailPoint, cloud security, PKI, DevSecOps, or identity security certifications are desirable.
- Experience with CyberArk Privilege Cloud, CCP, Conjur, Secrets Hub, CyberArk Certificate Lifecycle Management, SailPoint IdentityIQ, or Identity Security Cloud is desirable.
- Experience with Azure/Entra ID, AWS, GCP workload identity, managed identity patterns, AI agents, service principals, API identities, machine identities, SIEM integration, or infrastructure-as-code is desirable.
Tech Stack
Categories
About Singtel
Singtel is a Singapore‑headquartered public telecommunications group founded in 1879 that sells mobile, broadband, and enterprise network services to consumers and businesses across Asia-Pacific. It owns Optus in Australia and operates NCS (regional IT services) and Nxera (data centers), and is expanding into AI infrastructure via its RE:AI GPU‑as‑a‑Service. Its revenue comes from connectivity subscriptions and managed services across networks, cloud, cybersecurity, and digital platforms, with equity stakes in regional operators broadening its reach.