Secret Management Engineer

Secret Management & Machine Identity Lead Engineer - Contract - Outside IR 35
Duration: 12 months, renewable | On site: 3 days/week | Travel: Occasionally to Europe (expenses covered) 
We are looking for a hands-on technical expert to lead the design and delivery of enterprise Secret Management, Machine Identity and PAM services.
You will define secure processes for secrets, certificates, API keys, tokens and non-human identities; integrate platforms with cloud, CI/CD and Kubernetes/OpenShift environments; and drive automation through APIs, Python, PowerShell and IaC.
Required experience:

• 8+ years in IAM, PAM, cybersecurity or platform engineering
• 5+ years in Secret Management, Machine Identity or PAM
• Enterprise deployments at scale, including 5,000+ secrets
• CyberArk, HashiCorp Vault, Azure Key Vault, AWS Secrets Manager, Google Secret Manager, Delinea, BeyondTrust, Akeyless or One Identity
• DevSecOps, multi-cloud, Kubernetes/OpenShift and operational handover experience

Fluent English is essential; French and OT/manufacturing exposure are advantageous. 

Please, apply if relevant.