Cloud & Network Security Service Owner (Engineer)
A bit about the role
We are looking for a hands-on security engineer to take end-to-end ownership of our Cloud Security & Cryptographic Services and Network Security domains. You will shape how these services are delivered across cloud and hybrid-cloud environments - setting direction, driving adoption, and ensuring operational quality - while also contributing directly to implementation, automation, troubleshooting, and continuous improvement (this is not a purely coordinating role).
Your key tasks
- Own and continuously improve the Cloud & Network Security service scope, including:
- Cloud security posture and guardrails (secure-by-default baselines, policies, zones/guardrails)
- Cloud detection and response controls (configuration, tuning, integrations, signal quality)
- Cryptographic services (keys, certificates, secrets, API keys: lifecycle, rotation, revocation, access governance, compliance evidence)
- Network security posture and governance (firewalls, proxies, IDS/IPS, Cloudflare-based services, NSGs/security lists)
- Run a sustainable network rule governance model (inventory, periodic re-accreditation/recertification, exception handling, audit readiness)
- Drive automation-first operations: monitoring, metrics, alerting, playbooks, inventory automation, configuration validation, and drift prevention
- Translate stakeholder needs into clear standards, backlogs, and delivery priorities - and ensure adoption with minimal friction for engineering teams
- Actively contribute hands-on: configuration changes, scripting/automation, troubleshooting, and incident/on-call support when needed
This role can be based in Zurich or Bioggio.
A bit about you
- Strong experience in cloud security and network security in enterprise environments (ideally regulated/financial industry)
- Practical experience with cryptography / PKI / key and secrets management (lifecycle, access control, rotation, auditability)
- Hands-on engineering mindset (configuration work, troubleshooting, automation)
- Ability to manage a backlog/roadmap and align stakeholders, while staying pragmatic and delivery-focused
- Clear communication skills across technical and non-technical audiences
- Fluent in English
It would be a real bonus if you have
- Experience with Oracle Cloud Infrastructure(OCI) security services (e.g., Security Zones, Cloud Guard, Vault, Certificate Authority) and/or comparable cloud-native security stacks
- Experience with Cloudflare, Fortinet, Check Point, and/or firewall orchestration/governance tooling
- Automation skills: Terraform, CI/CD, Python
- Relevant certifications (e.g., CCSP, CISSP, cloud security certifications, CCNP Security)
- German and/or Italian
Additional information
We realize that managing work life balance is a challenge we all face in our daily lives and in order to support with this we are pleased to offer hybrid and flexible working for most of our Avaloqers to maintain work life balance and still continue our fantastic Avaloq culture in our global offices.
In Avaloq we are proud to embrace diversity and understand the success of our business is built on the power of different opinions, we are whole heartedly committed to fostering an equal opportunity environment and inclusive culture where you can be your true authentic self.
We hire, compensate and promote regardless of origin, age, gender identity, sexual orientation or any other fantastic traits that make us all unique, we have done our best to write this advert in an inclusive and neutral way.
Please be aware that we will not accept speculative CV submissions for any of our roles from recruitment agencies, and any unsolicited candidate submissions will be exempt from any payment expectations.
#LI-Hybrid
Benefits
- Annual bonus
At Avaloq we work hard to remain an industry leading provider and we love to reward our colleagues with a share of that success with an annual bonus, you will even remain eligible for annual bonus while you do the hardest job of your life – taking care of your children during parental leave.
- Flexible working
We understand that fitting your life around your job can be challenging which is why in most roles we offer flexible working to allow you to thrive both in and out of work.
- Instant recognition
We love to see people thriving in their roles and we have an instant recognition scheme at Avaloq to help managers reward the great work our colleagues deliver with a gift to say thanks.
- Access to Udemy for professional and personal learning
We think it is important to learn and grow professionally, but if you are someone who likes to learn outside of work we give you access to online learning for both professional and personal learning, with over 210,000 courses to choose from.
About us
Founded and headquartered in Switzerland, Avaloq is continuously expanding its global footprint with around 2,500 colleagues in 12 countries, and more than 170 clients in 35 countries. We are an industry-leading provider of wealth management technology and services for financial institutions around the world, including private banks and wealth managers, investment managers, as well as retail and neo banks. Our research led approach and continual innovation is powered by the passion and creativity of our colleagues.
We are always looking for talented people to join us on our mission to orchestrate the financial ecosystem and democratize access to wealth management. Avaloq offers the opportunity to work closely with some of the world’s leading financial institutions as we jointly develop and shape careers. Championing a collaborative, supportive and flexible work environment empowers our colleagues to reach their full potential.