Senior Platform Engineer - Identity & Security 80-100%

Zürich Versicherungs-Gesellschaft AG / Zurich Insurance Company Ltd / Zurich Compagnie d'Assurances; Lavamünd; Hybrid; EUR 148.000 - 201.000; Vollzeit

Zusammenfassung

Zurich Insurance Company Ltd is seeking a Senior Platform Engineer - Identity & Security to lead the evolution of our identity and access management, with a focus on Keycloak, Zero Trust, and AI-augmented workflows. You will collaborate with product owners and engineers to shape secure, scalable platforms in a hybrid Zurich setting.

The role requires 7+ years in software or security engineering, deep authentication expertise, and strong communication.

Qualifikationen

• 7+ years in software or security engineering.
• Deep expertise in modern authentication (OAuth 2.0, OIDC, SAML, PKCE, token lifecycle).
• Hands-on Keycloak experience.
• Experience with agentic AI access management.
• Knowledge of fine-grained authorization (OpenFGA, OPA, Cedar) and Zero Trust.
• Experience with Azure and/or AWS and cloud-native engineering.
• Strong communication skills and ownership mindset.
• Fluent in English; German is a plus.

Aufgaben

• Set the technical direction for identity and security engineering.
• Shape the Enterprise Identity Platform lifecycle around Keycloak.
• Develop target pictures for agentic AI access management and Zero Trust.
• Establish engineering standards, reviews, and quality gates.
• Collaborate with Digital Products to align insurance requirements with security outcomes.

Kenntnisse

Keycloak

OAuth 2.0

OIDC

SAML

PKCE

Zero Trust

OpenFGA

OPA

Cedar

Agentic AI

English

Azure

AWS

Kubernetes

Docker

Tools

Azure

AWS

Kubernetes

Docker

Keycloak

Jobbeschreibung

Senior Platform Engineer - Identity & Security (m/f/d) 80-100%

Zurich is a leading multi-line insurer that serves its customers in global and local markets. With about 55,000 employees, it provides a wide range of property and casualty, life insurance products and services in more than 215 countries and territories. Zurich's customers include individuals, small businesses, and mid‑small and large companies, as well as multinational corporations.

Are you energized by solving complex IT challenges, and do you bring the emotional intelligence to navigate stakeholders across business, security, and engineering? Do you question the status quo and use your judgment to shape direction where best practice does not yet exist?

In the Engineering and Integration team, we connect what's separated, secure what matters, and reveal what's hidden, while shaping how integration, identity, and security work in a world of Agentic AI, hybrid delivery, and Zero Trust. We're modernising our identity platform around Keycloak, embedding Zero Trust and fine‑grained authorization as the default, and building the identity foundations for an AI‑augmented enterprise.

We're looking for an experienced professional who leads through concepts, direction, and judgment, preparing Zurich Switzerland for what's next, by ensuring a future‑ready, cost‑efficient application landscape that scales as our business evolves - in an era where engineering value increasingly lies in judgment.

You’ll work closely with our Senior Product Owner/Architect, Engineers, and Specialists, as the person who moves things forward, technologically, methodologically and conceptually.

We're an agile, collaborative team with a strong network across Business Unit Switzerland. Together with all IT departments, we combine deep technical expertise with a clear focus on delivery and outstanding service to our stakeholders.

If you love solving hard problems, communicate with clarity and empathy, and thrive in multidisciplinary teams, this role is exactly right for you.

Find out here why Zurich Switzerland is among the "Top 3" companies in Switzerland. Become a part of it and apply as Senior Platform Engineer - Identity & Security.

What you will do

• Set the technical direction for how our team engineers identity and security in an era where coding shifts toward becoming a commodity, through concepts, principles, and reference architectures that others in the team and beyond will build on and bring the team along on that journey
• Shape the evolution and operations of our Enterprise Identity Platform (strategic focus: Keycloak), including OAuth 2.0, OIDC, SAML, and PKCE, while steering the phase out of our legacy federation and extend our security posture into event‑driven and AI‑augmented workflows
• Develop and articulate the target picture for identity and security in the age of Agentic AI, from access management and security concepts for AI agents, agentic workflows, and workload identity, to fine‑grained authorization (OpenFGA, OPA, Cedar) and Zero Trust
• Set engineering standards, reviews, and quality gates across internal teams, partners, and AI‑augmented workflows - ensuring quality, security, and knowledge transfer
• Partner with business domains and Digital Products to translate insurance requirements into robust identity and security outcomes

What you bring

• 7+ years in software or security engineering - ideally in insurance, banking, or a related financial services industry - with deep expertise in modern authentication (OAuth 2.0, OIDC, SAML, PKCE, token lifecycle, federation, LDAP) and hands‑on Keycloak experience
• Hands‑on experience with Agentic AI access management and security concepts (agent identity, agent‑to‑agent auth, MCP security, prompt injection defense, supply chain security for AI components) and a critical eye for the limitations of AI‑augmented development (Copilot, Claude, agentic workflows)
• Solid understanding of fine‑grained authorization (OpenFGA, OPA, Cedar), Zero Trust, and cloud‑native engineering (Azure and/or AWS, containers, event streaming)
• Strong sense of E2E ownership, business curiosity, ability to translate business intent into technical specifications, critical thinking and reflection, and ability to apply principles, name risks, surface trade‑offs and manage ambiguity, paired with strong communication skills that earn trust and bring senior engineers along
• Fluent in English, both spoken and written, German is a plus

Your contact

Talent Acquisition Consultant: Marco Stettler ()

Additional Information

Full time or part time: 80 - 100%

Work location: Zurich, Oerlikon

Hybrid work: up to 40%

We look forward to receiving your online application - even without a cover letter.

You are welcome to convince us of your motivation in a personal meeting.

Who we are

Zurich is a strong brand - more than 1.4 million Swiss customers place their trust in our products and services. Our 53,000 employees worldwide form the basis of our success, helping our customers in 210 countries and territories to understand and protect themselves from risk. In order to deliver our services, we offer our employees flexible working models and interesting opportunities for further training & development. As a Zurich employee you benefit from a multitude of advantages as well as a strong culture, characterized by acceptance, diversity and team spirit.

At Zurich, we foster a culture of diversity and inclusion. Our purpose and values are designed to protect, inspire confidence and help our employees reach their full potential. We value and defend what is right and promote opportunities for equity among our professionals, regardless of gender, disability, LGBTQ +, race, ethnicity, generations, belief, etc. Our talent acquisition and hiring processes respect this commitment daily. Join Zurich and be part of this culture.

Information for recruitment agencies

Zurich accepts no applications from recruitment agencies for this position. We therefore request that recruitment agencies do not submit any candidate documents neither via our employees nor through our online career portal. We refuse any responsibility for unsolicited applications as well as any associated fees. Thank you for your understanding.