DevOps Engineer – IAM Team

Founded and headquartered in Switzerland, Avaloq is continuously expanding its global footprint with around 2,500 colleagues in 12 countries, and more than 170 clients in 35 countries. We are an industry-leading provider of wealth management technology and services for financial institutions around the world, including private banks and wealth managers, investment managers, as well as retail and neo banks. Our research led approach and continual innovation is powered by the passion and creativity of our colleagues.
We are always looking for talented people to join us on our mission to orchestrate the financial ecosystem and democratize access to wealth management. Avaloq offers the opportunity to work closely with some of the world’s leading financial institutions as we jointly develop and shape careers. Championing a collaborative, supportive and flexible work environment empowers our colleagues to reach their full potential.

We are looking for a DevOps Engineer to join our Identity & Access Management (IAM) team. The ideal candidate has strong expertise in Terraform and GitHub and is eager to work in a dynamic, evolving environment.

You will be part of the internal Security Authority, responsible for managing authorization processes, executing user access management activities for both external and internal clients, and ensuring compliance with security policies. You’ll work in a demanding and complex international environment, requiring a structured and innovative approach, as well as high flexibility.

If you’re passionate about DevOps, security, and continuous improvement, we’d love to hear from you!

Your key tasks 

• Design, implement, and maintain IAM infrastructure using Terraform.
• Manage and automate workflows and CI/CD pipelines with GitHub Actions.
• Support Joiner, Mover, Leaver (JML) activities and integrate IAM processes.
• Work with One Identity and other IAM tools to improve access management solutions.
• Manage the authorization request process, ensuring security policies are enforced.
• Execute daily user profile and functional security activities for critical banking services.
• Perform controls on authorization management and interact with auditors.
• Collaborate with security and development teams to enhance IAM strategies.
• Monitor, troubleshoot, and optimize IAM systems for performance and security.
• Stay up to date with best practices and emerging technologies in DevOps and IAM.
• Act as a Security Authority for operational security activities.
• Ensure that access is granted according to security policy principles.
• Execute control activities related to authorization management.
• Interact with internal and external stakeholders, such as auditors.

• Bachelor’s degree in Information Technology or a related field.
• 2-3 years of experience in a similar position.
• Strong experience with Terraform and infrastructure as code (IaC).
• Solid knowledge of GitHub and CI/CD automation.
• Familiarity with JML processes and One Identity is a plus.
• Experience in user management and dealing with auditors.
• Fluent in English, both written and verbal.
• Strong communication and client orientation skills.
• Problem-solving mindset, adaptability, and a proactive attitude.

We realize that managing work life balance is a challenge we all face in our daily lives and in order to support with this we are pleased to offer hybrid and flexible working for most of our Avaloqers to maintain work life balance and still continue our fantastic Avaloq culture in our global offices. 

In Avaloq we are proud to embrace diversity and understand the success of our business is built on the power of different opinions, we are whole heartedly committed to fostering an equal opportunity environment and inclusive culture where you can be your true authentic self. 

We hire, compensate and promote regardless of origin, age, gender identity, sexual orientation or any other fantastic traits that make us all unique, we have done our best to write this advert in an inclusive and neutral way. 

Please be aware that we will not accept speculative CV submissions for any of our roles from recruitment agencies, and any unsolicited candidate submissions will be exempt from any payment expectations.  

#LI-Hybrid