DevOps Engineer with IAM focus

The Swiss National Supercomputing Centre (CSCS) develops and operates cutting-edge, high-performance computing (HPC) systems as an essential service facility for science. The centre enables world-class research through its scientific user lab, which is available to domestic and international researchers in academia, industry, and the business sector. The centre is operated by ETH Zurich and has offices in Lugano (headquarters) and Zurich.

Identity and Access Management (IAM) solutions are essential to CSCS research infrastructure. Reliable services, seamless integrations, and well-defined policies, supported by high-quality assets, provide the foundation for our advanced use cases.

To this end, we are hiring a DevOps Engineer (with IAM focus) for our offices in Zurich or Lugano.

In this role, you will be involved in activities such as:

• Manage and configure IAM services, including KeyCloak, WSO2 API Gateway, Waldur, OpenLDAP;
• Design and develop extensions, integrations, automations and monitoring solutions;
• Conduct proof-of-concepts to evaluate products, followed by implementation and adoption projects.

This position extends a multi-disciplinary team of highly skilled engineers focused on delivering IAM services.

Responsibilities include designing, installing, configuring, operating, and supporting services like Keycloak, as well as developing extensions, integrations, automations, and monitoring tools. You will engineer solutions to manage the inherent complexity of this domain, which typically limits the flexibility and scalability of IT services in multi-tenant and federated environments.

The ideal candidate has a background in both software development and systems administration, with a keen interest in IAM topics.

Preferred qualifications:

• Degree in Computer Science or related fields;
• Experience in software engineering, ideally with Python or Java, and through modern practices (e.g., CI/CD);
• Experiences deploying and operating services in Linux and Kubernetes environments;
• Interest in configuring standards like OAuth2, SAML, OpenID, and LDAP using open-source tools such as OpenLDAP and Keycloak

Additional aspects that make you stand out:

• Familiarity with IAM products like Keycloak, WSO2 Identity Server, Waldur, OpenLDAP, and similar;
• Experience in federated and multi-tenant environments;
• Practical knowledge of containerization and orchestration technologies;
• Experience managing database services (e.g., MySQL);
• Proficiency with modern automation tools;
• Experience with HPC systems.

In an organization that values autonomy, ownership and continuous learning, the successful candidate will have the opportunity to gain specialized hands-on experience through activities characterized by the challenging aspects typical of the HPC field.

Furthermore,

• ETH Zurich is a family-friendly employer with excellent and flexible working conditions.
• You can look forward to an exciting working environment, cultural diversity and attractive offers and benefits.
• We value the diversity of our team and, to further enhance the diversity of our workforce, we particularly encourage women to apply.