Zürcher Kantonalbank und ihre Tochtergesellschaften
Zürich
PKI & HSM Engineer (DevOps) (m/f/d)
- 29 October 2026
- 100%
- Zürich
Job summary
Join a leading IT company in Zürich focusing on PKI & HSM. This role offers a collaborative, innovative work environment with great benefits.
Tasks
- Operate and enhance PKI & HSM systems for security and integrity.
- Collaborate with Product Owners to implement and optimize solutions.
- Ensure IT system availability through monitoring and troubleshooting.
Skills
- You should have a background in IT, with relevant PKI & HSM experience.
- Strong knowledge in Thales Network HSMs and Microsoft AD CS.
- Proficiency in .NET development and PowerShell is a plus.
Is this helpful?
About the job
80% - 100% | IT / Business Engineering | Zurich | Experienced Professionals
Do you want to actively shape the future of our central PKI & HSM infrastructures? At a time when continuous authentication, integrity assurance, and data security are crucial, you have the opportunity to actively operate, maintain, and significantly further develop the current infrastructures, IT systems (platforms and applications). For this, we are looking for you as a committed and motivated DevOps Engineer (m/f/d) in the PKI & HSM area. Your focus is on the operation and further development of our IT systems with a focus on Hardware Security Modules (HSM), Public Key Infrastructures (PKI), and other relevant applications.
- Operation, maintenance, and further development of systems in the PKI & HSM area. This includes, among others, HSM, PKI systems, credential management systems (smartcards, hardware tokens), as well as systems for secret management.
- Implementation and optimisation of solutions in close collaboration with the product owners.
- Ensuring availability, scalability, and security of IT systems through monitoring, troubleshooting, and continuous improvements.
- Automation and modernisation of central systems and their processes.
- Support in connecting new IT systems to the PKI & HSM infrastructures as well as in analysing errors and resolving problems.
- Co-creating a long-term resilient PKI that can meet today’s and foreseeable future requirements.
- Close collaboration within the DevOps team and the business unit using an agile methodology (SAFe) to optimally implement IT system requirements and jointly further develop the system landscape.
- You have a qualification in computer science or a comparable qualification through relevant professional experience.
- You bring practical professional experience in PKI & HSM engineering. Knowledge in key and certificate management as well as secret and credential management is advantageous; ideally, you have already worked in a regulated environment.
- You also have good knowledge in the areas of Thales Network HSMs, Microsoft AD CS. Experience in .NET development and with PowerShell is an advantage.
- You demonstrate a comprehensive understanding of PKI and the underlying cryptography and possess practical experience in developing and operating modern solutions that meet the requirements of on-premise, cloud, and SaaS systems.
- Your structured working style, analytical thinking, and strong communication skills distinguish you.
- You have very good language skills in German and English.
- Professional or personal development opportunities and a range of tasks that give you the chance to independently advance your topics
- Possibilities to work part-time, support for further training, mobile and flexible working, as well as unpaid leave
- Attractive additional benefits and pension schemes well above the statutory minimum
- An attractive overall package including interesting fringe benefits and employee discounts (sports, leisure, childcare, health insurance)
- Live with us #morecan and #ITmadeinChreis5 – your colleagues and stakeholders are all in the same building, at home office, or in the building across the street – without time difference
is happy to assist you.
Phone: 044 292 27 95