11 hours ago
Petaling Jaya, MalaysiaMid Level / Senior
Responsibilities
- Drive HashiCorp Vault platform delivery and lead initiatives to upgrade and automate enterprise privileged access controls.
- Develop PowerShell, Python, and Ansible scripts and integrations to automate Vault operations.
- Build self-service portals and APIs for application teams and embed DevSecOps practices into access processes.
- Integrate secrets management and PKI workflows into CI/CD pipelines and infrastructure-as-code toolchains across AWS, Azure, and GCP.
- Monitor, maintain, and improve PKI infrastructure and certificate lifecycle management using Keyfactor, RedHat IDM, and related platforms.
- Implement ACME-based internal certificate issuance and secure Docker and Kubernetes environments through mutual TLS.
- Serve as the Tier 3 escalation point for complex PAM and HashiCorp Vault issues, providing troubleshooting, guidance, and architectural direction.
Requirements
- Bachelor’s degree in Computer Science, Engineering, or a related discipline, or equivalent experience.
- Three to five years of hands-on experience in cybersecurity or identity and access management, ideally in a large, global, or regulated organization.
- Practical experience configuring and administering HashiCorp Vault, including secrets engines, authentication methods, policy management, Vault Agent, or Kubernetes sidecar injection.
- Knowledge of PKI, certificate authorities, certificate issuance and renewal, and certificate lifecycle platforms such as Keyfactor, RedHat IDM, or Microsoft ADCS.
- Experience writing security automation and integrations with Python, PowerShell, or Ansible.
- Experience integrating secrets management or PKI workflows into CI/CD and infrastructure-as-code pipelines using Terraform, Jenkins, GitLab CI/CD, or GitHub Actions.
- Experience with AWS, Azure, or GCP and knowledge of SSL/TLS, cryptography, key exchanges, cipher suites, and trust validation.
- Working knowledge of CyberArk is advantageous.
- Clear communication, ownership, continuous improvement, and comfort working in a large matrixed organization are required; ITIL familiarity and experience in validated or regulated environments are a plus.
Tech Stack
AnsibleAWSAzureDockerGitHub ActionsGitLab CI/CDGoogle Cloud PlatformJenkinsKubernetesPowerShellPythonTerraform
Categories
About Roche
Roche is a Swiss healthcare company that develops and sells prescription pharmaceuticals and in vitro diagnostic systems for hospitals, laboratories, and clinicians. Its business spans two core divisions—Pharmaceuticals and Diagnostics—with strengths in oncology, immunology, neuroscience, infectious diseases, and diabetes care. Founded in 1896 and headquartered in Basel, Switzerland, Roche also advances personalized healthcare by pairing therapies with companion diagnostics.