Senior Platform Engineer – Identity & Security (80-100%)

About the role

We are looking for a senior platform engineer to lead the design and delivery of our enterprise identity and security platform. You will shape technical direction, drive modern authentication standards and embed Zero‑Trust principles across a hybrid, AI‑augmented environment.

Key responsibilities

• Set the technical direction for identity and security engineering through concepts, principles and reference architectures.
• Shape the evolution and operation of the Enterprise Identity Platform (Keycloak) including OAuth 2.0, OIDC, SAML and PKCE, while retiring legacy federation.
• Develop the target picture for identity and security in the age of Agentic AI, covering agent identity, agent‑to‑agent authentication and fine‑grained authorization.
• Establish engineering standards, reviews and quality gates for internal teams, partners and AI‑augmented workflows.
• Partner with business domains and digital product teams to translate insurance requirements into robust identity and security outcomes.

Required profile

• 7+ years in software or security engineering, preferably in insurance, banking or related financial services.
• Hands‑on experience with modern authentication (OAuth 2.0, OIDC, SAML, PKCE, token lifecycle, federation, LDAP) and Keycloak.
• Experience with Agentic AI access‑management concepts and security considerations such as prompt‑injection defense.
• Strong knowledge of fine‑grained authorization (OpenFGA, OPA, Cedar), Zero Trust and cloud‑native engineering (Azure/AWS, containers, event streaming).
• Excellent communication skills, business curiosity and ability to translate intent into technical specifications; fluent English, German a plus.

Required skills

• OAuth 2.0
• OpenID Connect (OIDC)
• SAML
• PKCE
• LDAP
• Keycloak
• Agentic AI access‑management
• OpenFGA
• OPA
• Cedar
• Zero Trust
• Azure
• AWS
• Containers
• Event streaming