Encryption Engineer – HashiCorp Vault & KMS

About the role

As an Encryption Engineer in the Encryption‑as‑a‑Service squad, you will join the Data Security tribe at ANZ to help protect the bank’s data assets. You will work on advancing the Advanced Data Protection and KMaaS platforms, delivering secure solutions that enable the business to move quickly while maintaining strong security controls.

Key responsibilities

• Collaborate with business and technology teams to design, implement and operate encryption and key‑management solutions.
• Develop and execute test cases and proof‑of‑concepts for key discovery and encryption tools.
• Deploy, maintain and continuously improve HashiCorp Vault and related KMS platforms.
• Support the Data Security Manager (DSM) solution and ensure its effective operation.
• Identify and drive process improvements to enhance data‑security controls.
• Operate in a fast‑changing environment, handling ambiguity and shifting priorities.

Required profile

• Minimum 5 years of experience in security engineering or related fields.
• Proven experience delivering Encryption‑as‑a‑Service solutions.
• Strong understanding of key‑management concepts and data‑security best practices.
• Ability to work both independently and as part of a collaborative team.

Required skills

• Hands‑on experience with HashiCorp Vault or a comparable encryption‑as‑a‑service platform.
• Practical knowledge of Key Management Services (KMS).
• Familiarity with Data Security Manager (DSM) solutions.