Junior IAM Engineer (Cloud Services)

Company Description

Founded and headquartered in Switzerland, Avaloq is continuously expanding its global footprint with around 2,500 colleagues in 10 countries, and more than 160 clients in 35 countries. We are an industry-leading provider of wealth management technology and services for financial institutions around the world, including private banks and wealth managers, investment managers, as well as retail and neo banks. Our research led approach and continual innovation is powered by the passion and creativity of our colleagues.
We are always looking for talented people to join us on our mission to orchestrate the financial ecosystem and democratize access to wealth management. Avaloq offers the opportunity to work closely with some of the world’s leading financial institutions as we jointly develop and shape careers. Championing a collaborative, supportive and flexible work environment empowers our colleagues to reach their full potential.

Job Description

Your key tasks

• Collaborate with cross-functional teams to design and implement robust identity and access management strategies across cloud platforms such as AWS, GCP, OCI, and Azure.
• Leverage infrastructure-as-code (IAC) methodologies, particularly using Terraform, to create, manage, and audit identity and access policies, ensuring compliance and security.
• Troubleshoot complex IAM-related issues, collaborating with senior team members to identify and resolve challenges.
• Contribute to the integration of IAM requirements into continuous integration and continuous deployment (CI/CD) pipelines, working closely with DevOps teams.
• Stay updated with the latest industry trends and technologies, expanding your knowledge and skills in cloud-based identity and access management.

Qualifications

• Experience with cloud platforms such as AWS, GCP, OCI, and Azure, including advanced IAM concepts and services.
• Strong knowledge of infrastructure-as-code (IAC) methodologies, with hands-on experience using Terraform for provisioning and managing IAM policies.
• Familiarity with identity management protocols, such as OAuth, SAML, and OpenID Connect.
• Solid understanding of networking concepts and cloud security best practices.
• Previous experience working on cloud-based IAM projects.
• Strong problem-solving abilities with a track record of resolving complex IAM challenges and improving security posture.
• Adaptability and willingness to learn new technologies and tools, keeping up-to-date with the evolving cloud security landscape.
• Ability to work collaboratively within a team environment, offering insights and contributing to project success.
• Good organizational and time-management skills, capable of prioritizing tasks and meeting project deadlines.
• Proficiency in English.

It would be a real bonus if you have 

• Relevant cloud certification (e.g., AWS Certified Security - Specialty, Google Cloud Professional Identity Engineer, Microsoft Certified: Azure Security Engineer Associate) and Oracle Cloud Infrastructure (OCI) certification.
• Italian language. 

Additional Information

We realize that managing work life balance is a challenge we all face in our daily lives and in order to support with this we are pleased to offer hybrid and flexible working for most of our Avaloqers to maintain work life balance and still continue our fantastic Avaloq culture in our global offices. 
In Avaloq we are proud to embrace diversity and understand the success of our business is built on the power of different opinions, we are whole heartedly committed to fostering an equal opportunity environment and inclusive culture where you can be your true authentic self. 
We hire, compensate and promote regardless of origin, age, gender identity, sexual orientation or any other fantastic traits that make us all unique, we have done our best to write this advert in an inclusive and neutral way. 
Please be aware that we will not accept speculative CV submissions for any of our roles from recruitment agencies, and any unsolicited candidate submissions will be exempt from any payment expectations.