Senior Platform Engineer, Identity & Zero Trust Security

Zürich Versicherungs-Gesellschaft AG / Zurich Insurance Company Ltd / Zurich Compagnie d'Assurances; Zürich; Hybrid; CHF 120,000 - 170,000; Full time

Job summary

Zurich Insurance Company Ltd is seeking a Senior Platform Engineer to lead identity and security efforts in a modern, AI-enabled enterprise. You will drive architecture, implement Keycloak-based solutions, and advance Zero Trust across on-prem and cloud environments.

The role requires clear communication, cross-functional collaboration with product owners and engineers, and a strong focus on secure, scalable identity in a hybrid setup at Zurich Switzerland.

Qualifications

• 7+ years in software or security engineering in financial services.
• Hands-on with Agentic AI access management and security concepts.
• Knowledge of fine-grained authorization, Zero Trust, and cloud-native engineering.
• Strong ability to translate business intent into technical specs and manage ambiguity.
• Fluent in English; German is a plus.

Responsibilities

• Set the technical direction for identity and security with principled architectures.
• Shape the Enterprise Identity Platform (Keycloak) and security posture (OAuth 2.0, OIDC, SAML, PKCE).
• Develop target identity and security concepts for AI-enabled workflows.
• Set engineering standards, reviews, and quality gates across teams.
• Partner with business domains to translate insurance requirements into security outcomes.

Skills

OAuth 2.0

OIDC

SAML

PKCE

Keycloak

Agentic AI

Zero Trust

Cloud - Azure/AWS

Containers

Security engineering

Tools

Azure

AWS

OpenFGA

OPA

Cedar

Job description

Zurich Insurance Company Ltd is seeking a Senior Platform Engineer to lead identity and security efforts in a modern, AI-enabled enterprise. You will drive architecture, implement Keycloak-based solutions, and advance Zero Trust across on-prem and cloud environments.

The role requires clear communication, cross-functional collaboration with product owners and engineers, and a strong focus on secure, scalable identity in a hybrid setup at Zurich Switzerland.