Senior Platform Engineer - Identity & Security

About the role

Zurich Insurance is looking for a Senior Platform Engineer to lead the evolution of its Enterprise Identity Platform. You will shape identity and security architecture in a hybrid, AI‑augmented environment, working closely with product owners, engineers and business stakeholders.

Key responsibilities

• Define technical direction for identity and security engineering, creating concepts, principles and reference architectures.
• Drive the evolution and operation of the Keycloak‑based platform, covering OAuth 2.0, OIDC, SAML, PKCE and the phase‑out of legacy federation.
• Develop the target vision for identity in the age of Agentic AI, including agent‑to‑agent authentication, fine‑grained authorization (OpenFGA, OPA, Cedar) and Zero Trust.
• Set engineering standards, conduct reviews and enforce quality gates across internal teams and AI‑augmented workflows.
• Partner with business domains and digital product teams to translate insurance requirements into robust identity and security solutions.

Required profile

• 7+ years of software or security engineering experience, preferably in financial services.
• Deep expertise in modern authentication protocols (OAuth 2.0, OIDC, SAML, PKCE, token lifecycle, LDAP) and hands‑on Keycloak experience.
• Experience with Agentic AI access management, security concepts for AI agents and awareness of AI‑related risks.
• Strong understanding of fine‑grained authorization, Zero Trust and cloud‑native engineering (Azure and/or AWS, containers, event streaming).
• Excellent communication skills in English; German is a plus.

Required skills

• Keycloak
• OAuth 2.0, OIDC, SAML, PKCE, LDAP
• Agentic AI security concepts
• OpenFGA, OPA, Cedar
• Zero Trust architecture
• Azure or AWS cloud platforms
• Containers and event streaming technologies