ICT System Engineer (DevSecOps) — Confederazione Svizzera
- Location
- Bern
- Contract
- other
- Posted
- 5 days ago
Role overview
- Ensure the onboarding of new systems/applications in PAM
- Create and manage safes and develop and automate PAM integrations for systems and applications (permissions, safe memberships according to Least Privilege and SoD, connectors, password rotation)
- Process complex access and exceptional cases in PAM (e.g. breakglass, escalations, root-cause analyses) and coordinate with operations, security and application managers
- Planning and carrying out periodic reviews/recertifications of the safe privileges
- Create and maintain runbooks, standards and proof of control
- Active support for audits and security reviews
- Enablement/coaching of stakeholders (operational teams, application managers) and transfer of know-how in the team
- Engineer(s) FH/Bachelor in computer science and telecommunications or equivalent education
- Several years of practical experience in the field of IAM (Identity & Access Management) / PAM (Privileged Acces Management) with responsibility for governance and operation in critical environments
- Ability to analyze complex issues in a structured manner, make decisions and manage stakeholders
- Good understanding of AD/LDAP and Windows/Linux (Red Hat) incl. Understanding group structures/tiering in the context of privileged access
Application process
- Ensure the onboarding of new systems/applications in PAM
- Create and manage safes and develop and automate PAM integrations for systems and applications (permissions, safe memberships according to Least Privilege and SoD, connectors, password rotation)
- Process complex access and exceptional cases in PAM (e.g. breakglass, escalations, root-cause analyses) and coordinate with operations, security and application managers
- Planning and carrying out periodic reviews/recertifications of the safe privileges
- Create and maintain runbooks, standards and proof of control;
- Active support for audits and security reviews
- Enablement/coaching of stakeholders (operational teams, application managers) and transfer of know-how in the team
- Engineer(s) FH/Bachelor in computer science and telecommunications or equivalent education
Questions about this listing
What salary does Confederazione Svizzera offer for this role?
Confederazione Svizzera lists CHF 73'000 - 124'500 gross per year for this position in Bern. This is the salary published in the original listing (or, when the employer omits a figure, a realistic estimate for the role and sector) — the calculator on this site converts it to your actual net take-home once cross-border tax and social contributions are applied.
Is this a full-time role, and what type of contract does Confederazione Svizzera offer?
This listing is a full-time position. The contract type shown here comes directly from the employer's original posting; always confirm exact hours, notice period and probation length with Confederazione Svizzera during the application process, since these details can vary by role even within the same contract category.
Do I need a cross-border work permit for a role in Bern?
EU/EFTA residents living in the border zone of the country adjoining Canton Bern can apply for a G permit; the Swiss employer files it with that canton's migration office after the contract is signed. Border-zone rules and processing times vary by neighbouring country and canton, so confirm the specifics with Bern's cantonal migration office or with HR during the application.
How do I apply for this position at Confederazione Svizzera?
Use the "Apply now" button on this page — it links directly to Confederazione Svizzera's original listing at jobs.admin.ch, so your application goes straight to the employer's own applicant-tracking system. Frontaliere Ticino does not collect or forward applications itself.
