Location: Zurich, Switzerland Job Type: Permanent Role Business fluent German required 100% Onsite, salary depending on experience Our client provides IT services and operational business processing for private banking units of the Royal Bank of Scotland Group. The experienced teams are working daily to provide top service for private banking clients and to develop innovative and digital to develop services. As a private bank and asset manager, our client offers a comprehensive range of tailor-made solutions for wealthy customers internationally. The focus is on the provision of digital top level services For the further development of the Security & IAM Engineering Team we are looking for a Cryptography Engineer for our customer: This position offers the unique opportunity to work in an international environment and to interact with a wide range of stakeholders The architecture is currently undergoing a fundamental change: In this position, together with our customer, you bring innovative IAM solutions for a wide range of technologies Your role • In this role you are responsible for at least one product and have the opportunity to take part in every life cycle phase, from Evaluation, design, implementation and support until the replacement • Your future team will be the hub when it comes to engineering security basics for authentication, confidentiality and Integrity works • You help the team and their customers, together with the manufacturers, to select the best cryptographic products and critical security data, integrate secure communication protocols, and ensure controlled operating environment • Your know-how for our customers • You have a degree in computer science or business informatics and several years of experience in a similar function or as a Windows or Network Security Engineer, in the IT security industry or financial sector • Additionally, you have either already dealt with the following topics or you are well on your way to doing so: Active Directory Certificate Services, Doman Services and possibly also Federation Services • HSM products, preferably from Thales/Gemalto • Smart Cards (IDPrime MD) and SSO • Cryptographic algorithms (AES, RSA, Elliptic Curve) and integrity protection mechanisms (MAC/MIC, Digital Signature) • Symmetric and asymmetric key management (PKI) • Authentication and encryption protocols (SSL/TLS, SSH, Kerberos, SAML) • operating systems: Windows, Red Hat Enterprise Linux • Script and programming languages: PowerShell, C#.NET • Webserver/Servlet Container: IIS, Apache Tomcat • Manufacturers and products: MyID CMS, SafeNet Luna HSM, Keyon true-Xtender • Standards: PKCS11, X.509, FIPS 140 • ITIL, DevOps, Scrum • Very good German and English