Senior PAM & Vault Engineer — PKI, Secrets & Cloud

Roche; Petaling Jaya; On-site; MYR 120,000 - 180,000; Full time

Job summary

Roche seeks a Cybersecurity Analyst specializing in privileged access management (PAM), HashiCorp Vault, and PKI to join a global security team. You will own meaningful workstreams, partner with product owners, and act as the Tier 3 expert for complex Vault issues in a global enterprise.

You will design, build, and continuously improve security platforms, tooling, and automation across cloud environments (AWS/Azure/GCP) while embedding DevSecOps practices.

Qualifications

• Bachelor's degree in Computer Science, Engineering, or related field, or equivalent experience.
• 3–5 years hands-on cybersecurity or IAM experience in large, regulated orgs.

Responsibilities

• Drive Vault platform delivery and upgrade privileged access controls across the enterprise.
• Design and deploy automation scripts (PowerShell, Python, Ansible) to streamline Vault operations.
• Build self-service portals and APIs to simplify secret usage for application teams.
• Integrate secrets management into CI/CD pipelines and IaC toolchains across AWS, Azure, GCP.
• Monitor and evolve PKI infrastructure (Keyfactor, RedHat IDM, ADCS) and certificate lifecycles.
• Implement ACME-based automation for internal certificate issuance and PKI workflows.
• Secure containerised environments (Docker, Kubernetes) with mutual TLS.
• Serve as Tier 3 escalation for complex PAM and Vault issues with architectural guidance.

Skills

HashiCorp Vault

PKI

Secrets management

CI/CD

DevSecOps

Kubernetes

Docker

Education

Bachelor's degree in Computer Science / Engineering

Tools

HashiCorp Vault

Keyfactor

RedHat IDM

Microsoft ADCS

CyberArk

Ansible

Terraform

Jenkins

GitLab CI/CD

GitHub Actions

Kubernetes

Docker

Job description

Roche seeks a Cybersecurity Analyst specializing in privileged access management (PAM), HashiCorp Vault, and PKI to join a global security team. You will own meaningful workstreams, partner with product owners, and act as the Tier 3 expert for complex Vault issues in a global enterprise.

You will design, build, and continuously improve security platforms, tooling, and automation across cloud environments (AWS/Azure/GCP) while embedding DevSecOps practices.