Privileged Access Management Developer (HashiVault Focus)

About the role

Roche is hiring a Privileged Access Management Developer for its Enterprise PAM team, which sits within the Identity and Access Management (IAM) group. You will focus primarily on HashiCorp Vault while working alongside colleagues who manage and support a wider enterprise security landscape including CyberArk and Red Hat IDM. The role offers growing autonomy, contribution across the product lifecycle and proactive improvement of the PAM domain.

Key responsibilities

• Develop secret management features, integrations and automation with HashiCorp Vault, using Python, PowerShell, Ansible and YAML, and build self-service portals and APIs
• Enhance and maintain Infrastructure-as-Code toolchains and integrate secure workflows into AWS, Azure and GCP via Jenkins, GitLab, GitHub Actions and Terraform
• Act as a Tier 3 technical contact, lead troubleshooting, follow ITIL, GxP, Product Management and Agile processes, and provide 24x7 support for major and critical issues (flexibility on working hours)
• Work with a global team to improve capabilities for business users and security staff, gather and validate security requirements, and communicate clearly with stakeholders

Required profile

• Bachelor's degree in Computer Science, Engineering or a related field, or equivalent accredited certifications
• 1-3 years of experience in an IT operations or security role, preferably in a global or regulated environment
• Strong spoken and written English

Required skills

• Hands-on HashiCorp Vault and strong understanding of PAM concepts
• REST APIs, Ansible, Terraform, Python, PowerShell and Docker
• DevOps practices, IaC toolchains and cloud IAM (AWS, Azure or GCP)
• Preferred: CyberArk and Red Hat IDM, network security (SSL/TLS, cryptography), Zero Trust and secure development practices