Principal Systems Analyst, Non‑Human Identity and Secrets Management

Job Description

Note:

Fidelity will not provide immigration sponsorship for this position.

The Principal Systems Analyst for Non-Interactive Secrets Management is the technical and analytical lead responsible for backlog refinement, requirements, and assistance in delivering the firm’s non‑interactive secrets platforms. This role translates complex cybersecurity needs into clear requirements, structured user stories, measurable outcomes, and actionable acceptance criteria. With deep expertise in Hashi Corp Vault and broader non‑human identity frameworks—including SPIFFE/SPIRE, workload identities, and service authentication patterns—this ensures the platform architecture and onboarding models are robust, secure, and scalable.

The analyst drives the earliest and most critical stages of work: discovery, requirements definition, dependency mapping, and bringing clarity to ambiguous, cross‑domain challenges.

• Lead discovery, analysis and requirements gathering.
• Break large initiatives into well‑defined epics and user stories.
• Serve as the team’s primary analytical authority, ensuring requirements are technically sound.
• Define functional specifications, workflows, integration requirements, and service consumption models for secrets management.
• Partner closely with engineers across the full delivery lifecycle, providing clarity and alignment from design through deployment.
• Drive consistent onboarding and service patterns, self‑service enablement, and operational excellence.
• Contribute to platform roadmaps, architecture discussions, control patterns, and capability evolution.
• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field (Master’s preferred).
• Minimum 5 years’ experience in systems and technical analysis.
• Strong expertise in Hashi Corp Vault and non‑interactive secrets workflows (policies, auth methods, KV, Transit, dynamic secrets, integrations).
• Advanced analytical and problem‑solving skills with the ability to decompose complex, multi‑domain problems into clear, actionable components.
• Proven experience writing high‑quality user stories, acceptance criteria, requirements documents, and systems/process specifications.
• Excellent communication and facilitation skills, capable of driving alignment across engineering, product, and business stakeholders.
• Strong understanding of cloud infrastructure and identity (AWS IAM roles/policies, Azure Managed Identities, Kubernetes workload identities, service mesh patterns).
• Knowledge of non‑human identity and workload identity technologies such as SPIFFE/SPIRE, cloud workload identities, X.509/SVID issuance, and service authentication models.

Fidelity is transitioning to a full‑time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles.

Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain criminal histories.