The Specialist – Secrets Management is responsible for implementing, managing, and governing enterprise‑grade secrets management and privileged access mechanisms across ADCB’s on‑premise, cloud, and hybrid environments.
The role ensures secure storage, rotation, access control, and auditability of sensitive credentials, aligning with banking security standards, regulatory requirements (CBUAE),
Key Responsibilities
Secrets Management & PAM Operations
- Design, implement, and manage Secrets Management solutions for applications, services, and infrastructure (e.g., CyberArk Secrets Management, CCP, Conjur, or equivalent platforms).
- Eliminate hard‑coded credentials across applications and automation pipelines.
- Manage secure storage, retrieval, rotation, and lifecycle of application secrets, service accounts, API keys, certificates, and tokens.
- Integrate secrets management with on‑prem, cloud (AWS, Azure), and containerized environments.
Security & Governance
- Enforce least‑privilege access and Zero Trust principles for privileged and non‑human identities.
- Ensure compliance with CBUAE, ISO 27001, internal audit, and risk control requirements.
- Support internal and external audits by providing evidence, reports, and access logs related to secrets usage and privileged access.
- Maintain clear documentation, SOPs, and governance artifacts.
Integration & Automation
- Integrate secrets management with:
- CI/CD pipelines (DevOps / DevSecOps)
- Cloud platforms (AWS, Azure)
- Databases, middleware, and enterprise applications
- Work closely with DevOps, Cloud, Security Operations, and Application teams to embed secrets securely into delivery pipelines.
Skills
Key Skills & Experience
Technical Skills
- Hands‑on experience with Secrets Management / PAM platforms (CyberArk preferred).
- Strong understanding of:
- Privileged Access Management (PAM)
- Secrets lifecycle management
- IAM concepts and access governance
- Experience working with Linux, Windows, databases, and application service accounts.
- Exposure to cloud platforms (AWS / Azure) and automation pipelines.
- Knowledge of SIEM integration, monitoring, and audit logging.
Governance & Compliance
- Experience working in banking or regulated environments.
- Familiarity with security frameworks, audit processes, and risk assessments.
- Ability to translate security controls into practical, implementable solutions.