Senior Platform Engineer - Identity & Security (Keycloak)

Location: Oerlikon, Zurich, Switzerland; hybrid working with up to 40% remote work

Company

hirify.global is an insurance company modernizing its identity, security, integration, and application landscape for an AI-augmented enterprise.

What you will do

• Set technical direction through concepts, principles, reference architectures, engineering standards, reviews, and quality gates.
• Shape and operate the enterprise identity platform based on Keycloak, including OAuth 2.0, OIDC, SAML, PKCE, token lifecycle management, federation, and LDAP.
• Lead the transition away from legacy federation and extend security into event-driven and AI-augmented workflows.
• Define identity and security foundations for AI agents, agentic workflows, workload identity, and fine-grained authorization.
• Collaborate with product owners, architects, engineers, specialists, business domains, and Digital Products to translate insurance requirements into technical outcomes.

Requirements

• 7+ years of experience in software or security engineering, ideally in insurance, banking, or financial services.
• Deep expertise in modern authentication and hands-on Keycloak experience.
• Experience with AI-agent access management and security, including agent identity, agent-to-agent authentication, MCP security, prompt-injection defense, and AI supply-chain security.
• Understanding of fine-grained authorization with OpenFGA, OPA, or Cedar; Zero Trust; and cloud-native engineering with Azure and/or AWS, containers, and event streaming.
• Strong ownership, critical thinking, business understanding, communication, and ability to manage ambiguity and technical trade-offs.
• Fluent spoken and written English required. German is a plus.

Culture & Benefits

• Agile and collaborative environment with strong connections across Business Unit Switzerland and IT departments.
• Close collaboration with multidisciplinary teams, business stakeholders, partners, and senior engineers.
• Part-time or full-time employment at 80–100%.
• Hybrid working available up to 40%.
• No travel required.

Hiring process

• Apply directly online with a CV.
• Initial application review is performed personally by the Talent Acquisition team.
• After the first meeting with the hiring manager, candidates receive individual feedback.