Specialist – Secrets Management

The Specialist – Secrets Management is responsible for implementing, managing, and governing enterprise‑grade secrets management and privileged access mechanisms across ADCB’s on‑premise, cloud, and hybrid environments.The role ensures secure storage, rotation, access control, and auditability of sensitive credentials, aligning with banking security standards, regulatory requirements (CBUAE),Key ResponsibilitiesSecrets Management & PAM OperationsDesign, implement, and manage Secrets Management solutions for applications, services, and infrastructure (e.g., CyberArk Secrets Management, CCP, Conjur, or equivalent platforms).Eliminate hard‑coded credentials across applications and automation pipelines.Manage secure storage, retrieval, rotation, and lifecycle of application secrets, service accounts, API keys, certificates, and tokens.Integrate secrets management with on‑prem, cloud (AWS, Azure), and containerized environments.Security & GovernanceEnforce least‑privilege access and Zero Trust principles for privileged and non‑human identities.Ensure compliance with CBUAE, ISO 27001, internal audit, and risk control requirements.Support internal and external audits by providing evidence, reports, and access logs related to secrets usage and privileged access.Maintain clear documentation, SOPs, and governance artifacts.Integration & AutomationIntegrate secrets management with:CI/CD pipelines (DevOps / DevSecOps)Cloud platforms (AWS, Azure)Databases, middleware, and enterprise applicationsWork closely with DevOps, Cloud, Security Operations, and Application teams to embed secrets securely into delivery pipelines.SkillsKey Skills & ExperienceTechnical SkillsHands‑on experience with Secrets Management / PAM platforms (CyberArk preferred).Strong understanding of:Privileged Access Management (PAM)Secrets lifecycle managementIAM concepts and access governanceExperience working with Linux, Windows, databases, and application service accounts.Exposure to cloud platforms (AWS / Azure) and automation pipelines.Knowledge of SIEM integration, monitoring, and audit logging.Governance & ComplianceExperience working in banking or regulated environments.Familiarity with security frameworks, audit processes, and risk assessments.Ability to translate security controls into practical, implementable solutions.#J-18808-Ljbffr