Public Key Infrastructure Senior Engineer - RDT Identity & Access Management

About this role

<p>At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come

Join Roche, where every voice matters.</p><h3></h3><p></p><h3>The Position</h3><p>At the heart of our digital security is the trust we build through encrypted communication. As a<b> PKI Senior Engineer,</b> you will join our Identity and Access Management (IAM) team to lead the design and evolution of our global PKI strategy, moving us away from manual interventions toward a fully orchestrated, "zero-touch" certificate lifecycle. As a senior member of the team, you will bridge the gap between traditional security infrastructure and modern DevOps practices, ensuring that security is a frictionless part of our deployment pipeline.</p><p></p><p><b>The Opportunity</b></p><p></p><p><b>PKI Architecture & Infrastructure</b></p><ul><li>Design and maintain the Microsoft AD CS architecture (Root, Policy, and Issuing CAs), ensuring high availability and secure HSM (Hardware Security Module) integrations</li><li>Lead the enterprise-wide implementation of Keyfactor Command, configuring advanced discovery, automated alerts, and self-service certificate portals</li><li>Architect and implement ACME-based orchestration for automated certificate renewals across Kubernetes, cloud instances, and legacy on-prem systems</li><li>Manage business analysis activities on complex projects across multiple security domains, handling ambiguous requirements and navigating intricate stakeholder environments</li></ul><p></p><div></div><p><b>Automation & DevOps Integration</b></p><ul><li>Develop and maintain robust automation workflows using Version Control and CI/CD pipelines to in

Apply for this role on Roche’s official careers site.