Bei Roche kannst du ganz du selbst sein und wirst für deine einzigartigen Qualitäten geschätzt. Unsere Kultur fördert persönlichen Ausdruck, offenen Dialog und echte Verbindungen. Hier wirst du für das, was du bist, wertgeschätzt, akzeptiert und respektiert. Dies schafft ein Umfeld, in dem du sowohl persönlich als auch beruflich wachsen kannst. Gemeinsam wollen wir Krankheiten vorbeugen, stoppen und heilen und sicherstellen, dass jeder Zugang zur Gesundheitsversorgung hat – heute und in Zukunft. Werde Teil von Roche, wo jede Stimme zählt.

Die Position

About the Team
You will join the Enterprise Privileged Access Management (PAM) team—a multicultural, global group focused on Identity and Access Management (IAM). While your primary technical focus will be HashiCorp Vault, you will be part of a broader team that collectively manages and supports a diverse enterprise security landscape, including CyberArk and Red Hat IDM.
In this role, you will work with growing autonomy on defined tasks, contribute to various stages of the product lifecycle, and proactively identify solution-level improvements within the PAM domain.

Job Responsibilities
1. Vault Development& Automation

- Implement secret management features, integrations, and automation with a primary focus on HashiCorp Vault.
- Develop and deploy automation scripts using Python, PowerShell, Ansible, and YAML to streamline day-to-day operations.
- Build self-service portals and APIs to facilitate effortless secret usage, empowering application teams and embedding DevSecOps principles into access workflows.

2. Pipeline Integration

- Enhance and maintain Infrastructure-as-Code (IaC) toolchains.
- Leverage DevOps and CI/CD tools (Jenkins, GitLab, GitHub Actions, Terraform) to integrate secure workflows into major cloud platforms (AWS, Azure, GCP).

3. Operations& Support Excellence





- Serve as a Tier 3 technical contact, participating in and leading troubleshooting efforts for complex infrastructure and security tools.
- Follow and implement relevant ITIL, GxP, Product Management, and Agile methodologies (Request, Incident, Change, and Problem Management).
- Proactively monitor systems for performance, capacity, and vulnerability management.
- Provide 24x7 support for major and critical issues (requires flexibility regarding working hours).

4. Stakeholder Management& Collaboration

- Collaborate with a general team to improve capabilities for business users and security staff across Vault, CyberArk, and Red Hat IDM.
- Identify and engage key technical and business stakeholders to elicit, clarify, and validate security requirements.
- Deliver tailored communication, facilitate meetings, and provide clear incident updates.

Qualifications
Minimum Requirements

- Education: Bachelor’s Degree in Computer Science, Engineering, a related discipline, or equivalent industry-accredited certifications.
- Experience: 1–3 years of experience in an IT operations or security role, preferably within a global organization or regulated environment.
- Secrets Management: Strong understanding of PAM concepts, with hands-on experience in HashiCorp Vault.
- Automation& Scripting: Proficiency with REST APIs, infrastructure automation (Ansible, Terraform), scripting (Python, PowerShell), and Docker.
- Cloud& DevOps: Experience with DevOps practices, IaC toolchain support,



and general knowledge of Cloud IAM (AWS, Azure, or GCP).
- Language: Strong spoken and written English.

Preferred (Bonus) Skills

- Additional PAM Tools: Knowledge or experience supporting CyberArk and/or Red Hat IDM (including Unix Access Management and LDAP).
- Network Security: Familiarity with network security concepts, including SSL/TLS protocols, cryptography, key exchanges, cipher suites, and trust validation.
- Security Frameworks: Strong grasp of secure development practices, Zero Trust principles, and common web vulnerabilities.

Core Competencies

- Communication: Excellent negotiation, documentation, and interpersonal skills; ability to articulate complex technical concepts to both developers and business stakeholders.
- Innovation& Autonomy: A mindset for championing secure, automated solutions that enhance developer efficiency, with a proven ability to handle moderate complexity and navigate stakeholder landscapes.
- Mentorship: Ability to actively mentor junior teammates and foster a security-first culture.

Wer wir sind

Eine gesündere Zukunft treibt uns zur Innovation an. Mehr als 100.000 Mitarbeiter weltweit arbeiten gemeinsam daran, wissenschaftliche Fortschritte zu erzielen und sicherzustellen, dass jeder Zugang zur Gesundheitsversorgung hat – heute und für zukünftige Generationen. Durch unser Engagement werden über 26 Millionen Menschen mit unseren Medikamenten behandelt und mehr als 30 Milliarden Tests mit unseren Diagnostik-Produkten durchgeführt. Wir ermutigen uns gegenseitig, neue Möglichkeiten zu erkunden, Kreativität zu fördern und hohe Ziele zu setzen, um lebensverändernde Gesundheitslösungen zu liefern.

Gemeinsam können wir eine gesündere Zukunft gestalten.

Roche ist ein Arbeitgeber, der die Chancengleichheit fördert.

📌 Privileged Access Management Developer (HashiVault Focus) - RDT Identity & Access Management (España)
🏢 Roche
📍 España