Principal Engineer - Secrets Management

Create your best future and join as a Principal Engineer – Secrets Management

What’s the role?

As a Principal Engineer, you will lead the Bank’s enterprise secrets management strategy, driving the design, engineering and adoption of secure, scalable and automated solutions that protect critical credentials across on-premises, cloud and DevOps environments. You will define the technical direction for enterprise secrets management services, including Vault, machine identities, service accounts, certificates, keys and API secrets, while reducing cyber risk and enabling secure digital transformation across the organisation.

Additionally, you'll own the evolution of Vault as an enterprise security service, expand adoption across technology platforms, and drive initiatives to identify, scan and eliminate unmanaged secrets from repositories, applications and infrastructure. You will champion automation, improve resilience and observability, establish secure-by-default patterns, and embed secrets management into modern engineering practices across AWS, Azure, Kubernetes, OpenShift and CI/CD ecosystems.

You will provide technical leadership across governance, standards and control uplift, partnering closely with Identity, Privileged Access, Cloud and Platform Engineering teams. You will drive lifecycle automation, strengthen non-human identity security, and ensure alignment with regulatory obligations and enterprise security objectives.

What do I need?

- Deep expertise in Vault, Secrets Management, Privileged Access Management (PAM), and Identity & Access Management (IAM).

- Proven experience delivering and operationalising enterprise-scale Secrets Management programs within large and complex environments.

- Strong hands-on security engineering experience across infrastructure, platforms, cloud, or DevSecOps environments.

- Experience managing machine identities, service accounts, and non-human identity security.

- Knowledge of PKI, certificate management, encryption keys, API secrets, and credential lifecycle management.

- Exposure to AWS, Azure, CI/CD pipelines, automation, and platform engineering.

- Strong stakeholder engagement skills with the ability to drive security uplift and large-scale transformation initiatives.

Why join us?

We’re obsessed with becoming our customers #1 banking partner for life and we’re looking for people who are passionate about helping us achieve that goal. In return we’re committed to making Westpac the best place to work in the country. Here are just a few of the ways we’re already doing that:

- Special offers on banking products and discounts from top brands, including generous employee-only mortgage rates!

- Flexible work arrangements to help you achieve a greater work life balance, and a variety of leave options including Culture, Lifestyle and Wellbeing leave.

- Tailored learning and development opportunities to help you grow your career within the bank.

- Lots of opportunities to give back to the Community by getting involved in our many volunteering initiatives

Create your future today
To get started, simply click on the APPLY button

We’re all about creating a supportive and inclusive community. We welcome everyone no matter your age, gender, background, or abilities. We also provide additional support to welcome our veterans, Indigenous Australians and neurodiverse community.

If you need any adjustments during the recruitment process, you can find more information and contact details on our FAQs and how to contact us page , under the Diversity, sustainability and flexibility section.

#LI - Hybrid