Zürcher Kantonalbank und ihre Tochtergesellschaften
Zürich
DevSecOps Engineer in the Field of PKI & HSM (m/f/d)
- 06 October 2026
- 100%
- Zürich
Job summary
Join us as a DevSecOps Engineer in Zürich, shaping our PKI & HSM infrastructures. Collaborate in a dynamic team focused on security and innovation.
Tasks
- Maintain and enhance our PKI & HSM systems and applications.
- Implement solutions with product owners and ensure system availability.
- Automate processes and support integration of new IT systems.
Skills
- You need relevant IT education and several years of PKI & HSM experience.
- Strong knowledge of Thales HSM, Microsoft ADCS, and .Net.
- Excellent communication skills in German and English.
Is this helpful?
About the job
80% - 100% | IT / Business Engineering | Zurich | Experienced Professionals
Do you want to actively shape the future of our central PKI & HSM infrastructures? At a time when continuous authentication, integrity assurance, and data security are crucial, you have the opportunity to actively operate, maintain, and significantly further develop the current infrastructures, IT systems (platforms and applications). For this, we are looking for you as a committed and motivated DevSecOps Engineer (m/f/d) in the field of PKI & HSM. Your focus is on the operation and further development of our IT systems with an emphasis on Hardware Security Modules (HSM), Public Key Infrastructures (PKI), and other relevant applications.
- Operation, maintenance, and further development of systems in the PKI & HSM area. This includes, among others, HSM, PKI systems, credential management systems (smartcards, hardware tokens), as well as systems for secret management.
- Implementation and optimisation of solutions in close collaboration with the product owners.
- Ensuring availability, scalability, and security of IT systems through monitoring, troubleshooting, and continuous improvements.
- Automation and modernisation of central systems and their processes.
- Support in connecting new IT systems to the PKI & HSM infrastructures as well as in analysing errors and resolving issues.
- Co-creating a long-term resilient PKI that can meet today’s and foreseeable future requirements.
- Close collaboration within the DevOps team and the business unit using an agile methodology (SAFe) to optimally implement IT system requirements and jointly further develop the system landscape.
- You have completed higher education in computer science (FH, ETH, university) or an equivalent further qualification.
- You bring several years of professional experience and solid knowledge, especially in PKI & HSM engineering as well as key and certificate management and/or secret and credential management, ideally in a regulated environment.
- You also have solid knowledge in Thales Network HSMs, Microsoft ADCS, .Net development, and PowerShell.
- You demonstrate a comprehensive understanding of PKI and the underlying cryptography and possess practical experience in developing and operating modern solutions that meet the requirements of on-premise, cloud, and SaaS systems.
- Your structured working style, analytical thinking, and strong communication skills distinguish you.
- You have very good language skills in German and English.
- Professional or personal development opportunities and a range of tasks that give you the chance to independently advance your topics
- Options to work part-time, support for further training, mobile and flexible working, as well as unpaid leave
- Attractive additional benefits and pension schemes well above the legal minimum
- An attractive overall package including interesting fringe benefits and employee discounts (sports, leisure, childcare, health insurance)
- Live with us #morecapable and #ITmadeinChreis5 – your colleagues and stakeholders are all in the same building, at home office, or in the building across the street – without time difference
is happy to assist you.
Phone: 044 292 27 95