Cybersecurity Analyst - Privileged Access Management

Bei Roche kannst du ganz du selbst sein und wirst für deine einzigartigen Qualitäten geschätzt. Unsere Kultur fördert persönlichen Ausdruck, offenen Dialog und echte Verbindungen. Hier wirst du für das, was du bist, wertgeschätzt, akzeptiert und respektiert. Dies schafft ein Umfeld, in dem du sowohl persönlich als auch beruflich wachsen kannst. Gemeinsam wollen wir Krankheiten vorbeugen, stoppen und heilen und sicherstellen, dass jeder Zugang zur Gesundheitsversorgung hat – heute und in Zukunft. Werde Teil von Roche, wo jede Stimme zählt.Die PositionIn a world where every application, pipeline, and cloud workload depends on secure access, the people who build and manage that trust layer are critical. At Roche, our Enterprise Privileged Access Management team is responsible for exactly that — ensuring the right systems and people have the right access, at the right time, with the right controls in place. If you enjoy working on platforms that matter, thrive in a complex global environment, and want to deepen your expertise in one of the most in-demand areas of enterprise security — this is the role for you.Your OpportunityAs a Cybersecurity Analyst specialising in PAM, HashiCorp Vault, and PKI, you will be a core member of a global security team working at the intersection of platform engineering and cybersecurity. You will own meaningful workstreams, partner with product owners and application teams, and serve as the Tier 3 expert when complex PAM and Vault issues need to be resolved. This is not a monitoring-and-ticket role — you will be expected to design, build, and continuously improve.In this role, you will:Drive HashiCorp Vault platform delivery in partnership with the product owner — leading initiatives to upgrade and automate privileged access controls across the enterpriseDesign and deploy automation scripts and integrations (PowerShell, Python, Ansible) to streamline Vault operations and reduce manual effortBuild self-service portals and APIs that make secret usage effortless for application teams, embedding DevSecOps principles into access processesIntegrate secrets management into CI/CD pipelines and IaC toolchains across major cloud platforms (AWS, Azure, GCP)Monitor, maintain, and evolve PKI infrastructure including certificate lifecycle management via platforms such as Keyfactor and RedHat IDMImplement certificate automation standards such as ACME for internal issuance and integrate PKI workflows into deployment pipelinesSecure containerised environments (Docker, Kubernetes) through mutual TLS implementationAct as the Tier 3 escalation point for complex PAM and HashiCorp Vault issues — providing advanced troubleshooting, guidance, and architectural direction