PAM & Vault Engineer | PKI, Automation, DevSecOps

Roche

Petaling Jaya

On-site

MYR 89,000 - 167,000

Full time

4 days ago

Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Roche in Malaysia seeks a Cybersecurity Analyst specializing in Privileged Access Management (PAM), HashiCorp Vault, and PKI to join a global security team. You will design, build, and continuously improve access controls across cloud platforms and on‑premises environments.

You will own workstreams, partner with product owners and application teams, and act as Tier 3 expert for complex PAM and Vault issues, embedding DevSecOps practices into CI/CD pipelines and IaC toolchains.

Qualifications

Bachelor's degree in CS/Engineering or equivalent experience.
3-5 years in cybersecurity or IAM in a large organisation.
Experience configuring and administering Vault in a team.
Knowledge of PKI, certificate lifecycle and ACME automation helpful.
Experience scripting with Python, PowerShell or Ansible.

Responsibilities

Drive HashiCorp Vault platform delivery with the product owner to upgrade and automate privileged access across the enterprise.
Design and deploy automation scripts and integrations (PowerShell, Python, Ansible) for Vault operations.
Build self-service portals and APIs to simplify secret usage for application teams.
Integrate secrets management into CI/CD pipelines and IaC toolchains across major cloud platforms.
Monitor, maintain and evolve PKI infrastructure including certificate lifecycle management via Keyfactor and RedHat IDM.
Implement ACME-based certificate automation and integrate PKI workflows into deployment pipelines.
Secure containerised environments (Docker, Kubernetes) using mutual TLS.
Act as the Tier 3 escalation point for complex PAM and Vault issues and provide architectural direction.