Secret Management Engineer

Secret Management & Machine Identity Lead Engineer - Contract - Outside IR 35Duration: 12 months, renewable | On site: 3 days/week | Travel: Occasionally to Europe (expenses covered) We are looking for a hands-on technical expert to lead the design and delivery of enterprise Secret Management, Machine Identity and PAM services.You will define secure processes for secrets, certificates, API keys, tokens and non-human identities; integrate platforms with cloud, CI/CD and Kubernetes/OpenShift environments; and drive automation through APIs, Python, PowerShell and IaC.Required experience:8+ years in IAM, PAM, cybersecurity or platform engineering5+ years in Secret Management, Machine Identity or PAMEnterprise deployments at scale, including 5,000+ secretsCyberArk, HashiCorp Vault, Azure Key Vault, AWS Secrets Manager, Google Secret Manager, Delinea, BeyondTrust, Akeyless or One IdentityDevSecOps, multi-cloud, Kubernetes/OpenShift and operational handover experienceFluent English is essential; French and OT/manufacturing exposure are advantageous. Please, apply if relevant.