Your new challenge

For SwissSign, the areas of cyber security and compliance are important components of its success. As part of the Information Security & Compliance team, you will take on the role of an Audit & Compliance Manager. The most important component is the management of external certificate audits, in which you will be responsible for at least once a year. Together with the team, you will follow the latest changes to the regulatory and technical requirements in certificates or identity in the area of compliance, bring them into the internal documentation and support the company as a specialist. 

If you do not have the relevant experience yet but you are very interested in our field of work and have an affinity for technology/IT, please apply for the position as a junior. 

Overview of your tasks

• Certification audit area 
  • Planning and conducting certification audits with our external auditors
  • Communication and coordination with internal stakeholders and external partners
  • Monitoring the implementation of the recommendations resulting from the audit reports
  • Working together as a team to develop overall audit planning and improve audit procedures and processes

• Compliance area
  • Preparation of specifications for operational departments in cooperation with Product Management
  • Monitoring of regulatory requirements
  • Supporting the operational implementation in the specialist areas
  • Continuous improvement of documentation (from concepts to work instructions)
  • Possibility to participate in external expert committees

What you bring along

• Experience in leading external audits or in project management
• Interest in compliance topics from the areas of PKI, certificates, signatures and identities
• Strong analytical and conceptual skills, good planning and organizational skills 
• As a link between internal and external departments, you communicate appropriately and transparently 
• Ability to work in a team: You stand up for your team and ask for help when you need it
• Good command of written and spoken German and English
• You keep calm and work carefully even in hectic times
• Further training in auditing (e.g. CISA) is an advantage
• Knowledge of the Microsoft OfficeSuite and Atlassian tools would be an advantage, or a quick grasp of digital familiarization

Junior 

• First experience in projects
• Willingness to familiarize yourself with complex topics
• Outgoing personality, who communicates openly with internal and external colleagues
• Technically minded person with analytical and conceptual skills
• Fluent in German and good written and spoken English
   

Your new challenge

To strengthen our team, of the only Public Certificate Authority (Public CA) in Switzerland, we are looking for an experienced Security Engineer, who will work with us, responsibly and carefully, to support the Lifecycle Management (LCM) of the SwissSign Certificate Authorities at the audited hardware, software and documentation levels.

Overview of your tasks

• At the hardware level, the focus is on the LCM («Setup», «Modify», «Deletion») of: 
  • Hardware Security Modules (HSM) from various manufacturers
• At the software level, the focus is on:
  • The LCM of strictly confidential crypto keys for CAs
  • The LCM of existing and future CAs on the SwissSign certificate platforms for the creation of TLS, SMIME and signature certificates
  • Further development and rebuilding of automation SW for consistent operationalisation across multiple environments
• At the documentation level, the focus is on the LCM of:
  • "Ceremonies", protocols, status information to prove  the correct management of the CAs to the auditors, which regularly check compliance with the standards of the CA Browser Forum, ETSI, ZertES, eIDAS, and others.

What you bring along

• Several years of experience in security engineering (with advantage PKI environment)
• Solid practical experience: Unix, Bash, Python 
• Confident in written and spoken English
• Able to work reliably in a synchronised team with a high degree of division of labour
• Able to think logically and overview complex interrelationships
• Attitude: "Documentation is a feature, not a bug"
• Impeccable public record
• Development potential: Willingness to take on group leadership and planning activities in the medium term

Your new challenge

As an experienced sales professional, it is easy for you to win new customers and establish a long-lasting relationship, by aligning their needs with our product portfolio.

An overview of your tasks

• Identification of customer needs, professional consulting and selling our products to business customers
• Acquisition of new business customers within the defined industry or target group
• Responsibility for the entire sales process from initial contact to conclusion of the contract, sometimes with several parties – end customer – partner – integration partner
• Building, expanding and maintaining sustainable customer relationships
• Evaluating and identifying sales opportunities within the target markets
• Development of "customer use cases" in cooperation with the pre-sales team
• Representation of SwissSign at sales and marketing events

What you bring along

• Experience and success in the sale of IT services to business customers
• Relevant experience (at least 6 years) in selling IT services, preferably software solutions to business customers and a good network in the ICT industry
• Team player with good social skills
• Ability to grasp complex relationships and present them in a target-group-oriented manner
• Communicative personality with negotiation and presentation skills
• University degree or equivalent in the field of economics, computer science or ICT 
• Fluent in German and English, both in writing and speaking, knowledge of French is a plus

Your new challenge

As an experienced engineer, you drive automation and standardization and act as a link between the application development and infrastructure teams. You solve incidents skillfully and ensure the highest availability of our applications. You will be a competent sparring partner for the development team when it comes to using the Kubernetes platform and setting up our Gitlab-based build pipelines. You will also help us define and implement standards to increase the efficiency and reliability of our modern infrastructure.

An overview of your tasks

• Skillful resolution of incidents
• Ensuring the highest availability of our applications 
• Effective sparring partner for the development team in using the Kubernetes platform and setting up our Gitlab-based build pipelines 
• Support in defining and implementing standards that increase the efficiency and reliability of our modern infrastructure

What you bring along

• Strong and proven experience with Kubernetes and PostgreSQL
• You are familiar with the following tools or are interested in learning about them: Ansible, openAM, ForgeRock, Java or Golang or Python, Elastic Stack, NSX Advanced Load Balancer, Rancher, GitOps, Monitoring/Alerting
• Several years of experience with DevOps approaches (technical as well as organizational)
• Hands-on experience in virtualization, containerization, container orchestration as well as configuration and automation tools
• Regular participation in the on-call duty
• Very good English skills (spoken and written), German skills are a plus

Your new challenge

Would you like to be part of a young and dynamic team and help with the further development of SwissSign products? As a DevOps Engineer, you will be responsible for the implementation and maintenance of software applications. Are you also willing to work on customer projects and support our customers on site?
 

Overview of your tasks

• Definition of the network architecture
• Installation and configuration of SwissSign products
• Integration of third-party products such as databases, PKI, Trusted Service Provider and archiving tools
• Follow-up and troubleshooting of our ticketing system
• Be part of the R&D team (Research & Development) to review and test the developments and contribute to the specification if the integration of the product is affected

What you bring along

• Very good network and infrastructure knowledge and "best practice development".
• At least 3+ years of experience in product integration in a complex environment
• University degree EPFL, HES diploma or equivalent qualification
• Knowledge of Kubernetes, Openshift, Hashicorp Vault, Docker, docker compose and helm chart.
• You are open-minded and enjoy working in a team 
• You are service and customer oriented and open to meet our customers on site
• Willingness to work on a flexible schedule (on-call duty)
• Development skills in Java and Spring configuration
• Knowledge of best development practices such as agile methodologies, version control management, HTTP and REST API
• Knowledge of developer tools such as OpenSSL, JIRA, GitLab and Jenkins
• Very good knowledge of French (native level) and good written and spoken English, German is a plus