Overview:
SOFTSWISS is hiring an Infrastructure Security Engineer to join our Infrastructure Security team.
Purpose of the role:
You will manage and improve the company’s PAM system, drive automation of access and security processes, collaborate with DevOps teams to embed security into workflows, and contribute to strengthening infrastructure security and compliance across the organisation.
Key responsibilities:
- Act as the primary administrator and L3 support for the PAM solution (Teleport)
- Maintain and further develop the Wazuh solution and the processes built on top of it
- Support and evolve the Security team’s infrastructure
- Be responsible for system and application monitoring metrics relevant to IAM/PAM
- Enhance and maintain automation processes for security and access provisioning operations
- Work closely with System Engineers to integrate security tools and processes into DevOps workflows
- Monitor and enhance infrastructure security and compliance
- Implement new security services and best practices across the company
Required Experience:
- More than three years of experience as a Security Engineer, System Administrator, DevOps Engineer, or in a related role
- Hands-on experience administering Identity and Access Management (IAM) and/or Privileged Access Management (PAM) solutions
- Strong knowledge and understanding of authentication/authorisation protocols (SAML, OIDC/OpenID, SCIM, LDAP, Kerberos)
- Strong Linux administration skills (especially with sudoers, facl, auditd)
- Solid Kubernetes administrator skills (in terms of Groups, Roles, RoleBindings)
- Good understanding of monitoring and observability tools (Prometheus, Grafana, VictoriaMetrics)
- Experience with Python scripting for automation and infrastructure management
- Basic experience with Infrastructure as Code (SaltStack, Terraform, Ansible)
- Clear and structured written and verbal communication skills
- Intermediate or higher level of English
Learn more about our hiring process here – what to expect, how to prepare, and what makes SOFTSWISS different.