Interval Group

Engineer

• We are seeking a Mid-level IAM, Secrets and PKI Engineer to join the Identity and Access Management team of a large internal platform programme in the energy sector.
• You will design, implement and operate Keycloak and HashiCorp Vault across a hybrid cloud environment, delivering scalable, secure and federated access management alongside a robust PKI and secrets management capability.
• Implementing RBAC/ABAC policies and multi-realm setups in Keycloak, mapping Kerberos/IPA identities and groups into realms, roles and clients
• Configuring SSO flows, MFA and identity federation across hybrid cloud and on-premises workloads
• Deploying Keycloak on VMs, Docker and Kubernetes (OpenShift and bare-metal), configuring OIDC, OAuth2, SAML and Kerberos/LDAP federation
• Deploying Keycloak on GKE with Helm/Operators, integrating with Google Identity and mapping Keycloak roles to GCP IAM roles
• Configuring HashiCorp Vault to secure Keycloak operational secrets, implementing dynamic secrets for DB backends and integrating Vault Agent/Sidecar injector for secret injection into Keycloak pods
• Deploying and operating Vault in production on Linux-based systems, including HA, Raft storage, seal/unseal mechanisms and HSM/KMS integration
• Managing Vault PKI operations including intermediates, issuing CAs, short-lived certificate issuance, CRL/OCSP integration and automated revocation
• Implementing ACME v2, EST for devices, AIA/CRL/OCSP publishing and RFC 5280 profiles
• Automating Keycloak and Vault deployment and configuration using Terraform, Helm and Ansible
• Integrating certificate and secret distribution into CI/CD pipelines (Jenkins, GitHub Actions, GitLab CI)
• Monitoring both platforms with Prometheus and Grafana and managing incident response for expired certificates, Vault unseal failures and IPA migration issues

IAM KeyCloak Secrets PKI Engineer

DevOps Engineer

• Designing and implementing DevSecOps architectures ensuring integrity, confidentiality and availability across systems, pipelines and repositories
• Developing and configuring CI/CD pipelines with built-in security scanning, compliance checks and automated validation
• Implementing secure configuration, access controls and encryption for systems, repositories and deployment pipelines
• Conducting risk assessments and threat modelling to proactively identify and mitigate weaknesses in DevOps workflows
• Automating infrastructure provisioning using Terraform, Ansible or OpenTofu following security and reliability best practices
• Designing and implementing self-service interfaces enabling developers to access security tools directly
• Integrating security tools into CI/CD pipelines as part of standard development workflows
• Automating SBOM and KBOM generation using tools such as Trivy, Syft and Dependency-Track, integrating outputs into CI/CD pipelines
• Continuously monitoring systems and containers for vulnerabilities, prioritising findings and coordinating remediation
• Conducting security hardening activities including least privilege enforcement, secure configuration baselines and penetration testing
• Performing regular audits of configurations, user access and system logs
• Creating and maintaining comprehensive documentation on architecture, configurations, processes and incident response plans

CI/CD Engineering – Security & Compliance

Security Engineer

• Advise on and deliver security infrastructure in line with architectural and operational requirements
• Focus on datacenter security, firewall management, DNS hardening and security delivery automation
• Develop detailed security deployment plans covering implementation phases, resources and timelines
• Install and configure security solutions in line with defined security standards and best practices
• Maintain thorough documentation of the security environment including configurations, protocols and decision justifications
• Continuously validate implementation processes for effectiveness and alignment with organisational goals
• Identify discrepancies or inefficiencies in processes and propose corrective actions

Infrastructure Domain Architecture – Security

Implementation Specialist

• Analyze existing and planned processes together with process owners, functional leads and implementation teams
• Translate process requirements into Jira, Confluence and JSM configurations, including issue types, fields, statuses, transitions, permissions, automations and dashboards
• Develop and continuously improve workflow concepts
• Document implemented workflows, configuration decisions and usage guidance
• Identify gaps between current process execution and tool usage and propose pragmatic improvements
• Design and implement templates, boards, spaces and onboarding flows within the Atlassian suite

Process Implementation Consultant

• Assess existing information security risk management, compliance management, non-functional requirements (NFR) management, architecture review, and security process workflows to identify gaps and opportunities for improvement
• Design efficient, pragmatic, and scalable processes that align security and regulatory requirements with operational feasibility
• Define and refine workflows for information security risk identification, assessment, mitigation, and reporting
• Design processes to interpret and implement compliance requirements, including internal standards
• Establish structured, repeatable processes for security architecture design reviews
• Provide advisory support on incident response, vulnerability management, and approval processes for Product Release Specifications (PRS)
• Ensure secure design principles are reflected in process definitions and review procedures
• Actively participate in organisational development coalitions to align information security, risk and compliance (ISRC) processes with the evolving operating model
• Support programme-enabling and knowledge-sharing activities

Security Process Specialist

• Derive concrete technical controls from high-level control objectives and frameworks such as NIS2 and ISO 27001
• Translate compliance and risk requirements into clear non-functional requirements (NFRs) for product lines and platform architecture
• Maintain the NFR category "Security" and provide recommendations for the definition of done for implementation and testing of controls
• Contribute to product specification (PRS) workflows by validating security-relevant inputs
• Enable the implementation of requirements in alignment with ISRC governance structures

Security Risk and Compliance Specialist

Security Operations

• Design and build SecOps tools, including SIEM, SOAR, vulnerability detection and management, EDR, logging pipelines, and user behavior analytics
• Develop architecture patterns and solution designs for the security tool ecosystem
• Evaluate and integrate new tools and platforms to improve detection, response, and automation capabilities
• Build and maintain scalable data ingestion, correlation, and alerting workflows for advanced detection and response
• Coordinate with operations engineers to jointly maintain SecOps workflows and ensure platform reliability
• Develop automation scripts, playbooks, and workflows in SOAR tools to improve response efficiency and reduce analyst workload
• Design and build an internal SecOps product to deliver detection and response capabilities for vulnerabilities, threats, and security incidents
• Integrate with the internal observability product and broader corporate SOC functions
• Provide technical leadership during incidents, including tool behavior, data quality, and technical issues
• Develop, test, and operationalize detection capabilities based on evolving threats and platform telemetry
• Create and maintain detection-as-code artifacts such as Sigma rules, YARA, KQL queries, and static analysis rules
• Validate detection quality through adversary simulation, purple teaming, or continuous tuning

Security Operations Engineer

Content Marketing Manager

• Create, review, publish, and maintain developer-focused learning materials, including tutorials, guides, onboarding materials, hands-on labs, and step-by-step walkthroughs
• Translate complex technical platform capabilities and SDLC concepts into structured, accessible, and practical learning content
• Produce developer-focused video content, including tutorials, platform demonstrations, feature demos, and onboarding videos
• Script and storyboard video content and manage updates based on feedback and platform development
• Prepare and deliver hands-on training sessions, workshops, and guided learning formats for software development teams
• Work directly with the platform to validate developer workflows and ensure content accuracy
• Coordinate with product managers, product owners, technical leads, documentation teams, and customer success stakeholders
• Define and track developer enablement KPIs, such as tutorial completion rates and time-to-first-deploy
• Create reusable learning paths, demo assemblies, and content formats across the program
• Ensure all content complies with platform usage policies, including approved patterns, secret management, and approved deployment topologies

Developer Enablement Content Specialist

Full-stack Engineer

• Write production-ready Python code to implement architecture designs
• Make and communicate technical decisions
• Create and communicate status reports
• Lead meetings and present technical concepts
• Mentor other developers and ensure timely delivery of features
• Participate in agile ceremonies and promote agile practices
• Identify and drive continuous improvement opportunities

Software Engineer

• Design, implement, and maintain robust infrastructure solutions while ensuring the highest standards of integrity, confidentiality, and system availability.
• Focus on empowering engineering teams by exposing security tools through self-service interfaces and automating complex compliance workflows.
• Central role in optimising continuous integration and delivery across a diverse service landscape.
• Analyse program requirements to design secure, scalable architectures that address complex integration and compliance needs.
• Develop and configure CI/CD pipelines featuring built-in security scanning, compliance checks, and automated validation.
• Implement secure configurations, access controls, and encryption for repositories, systems, and deployment workflows.
• Automate infrastructure provisioning and management using tools such as Terraform or OpenTofu.
• Design user-friendly self-service interfaces and APIs to allow developers to access security tools seamlessly.
• Drive automation efforts for the generation and validation of Software Bill of Materials (SBOMs) and KBOMs during build processes.
• Conduct continuous vulnerability management, risk assessments, and threat modelling to identify and mitigate potential weaknesses.
• Maintain system availability through disaster recovery planning, incident response, and routine audits of system logs and user access.
• Create comprehensive documentation, including step-by-step guides, architecture diagrams, and FAQs for internal and external stakeholders.
• Collaborate with cross-functional teams to resolve issues, implement new features, and ensure systems run optimally under data protection requirements.

CI/CD Engineer – Security & Compliance

Operations

• Maintain and optimise CI/CD pipelines to ensure deployment readiness and validate all deployment artifacts from an operational perspective.
• Define and enforce quality assurance measures, including standard operating procedures and successful test reporting.
• Implement rollback strategies and comprehensive operational monitoring for all production deployments.
• Manage monitoring, incident, problem, and change management within a multi-tenant managed Kubernetes environment.
• Monitor system health, performance metrics, and service availability, resolving incidents to minimise service disruption.
• Perform root cause analysis and implement corrective and preventive actions to enhance platform stability.
• Automate recurring operational tasks and critical processes to reduce toil and improve service reliability.
• Validate automated procedures through the full software development lifecycle, including staging and testing.
• Implement logging and monitoring strategies to adhere to security and audit compliance standards.
• Conduct routine security scans and remediate vulnerabilities across the platform.

CD Operations Engineer

Frontend Engineer

• Independently implement user stories within the Scrum team
• Ensure accessibility compliance according to WCAG AA/AAA
• Proactively evolve the application, both functionally and technically
• Gain domain knowledge related to e-invoicing / XRechnung
• Close collaboration within the development team

Senior Fullstack Developer – TypeScript, React, Accessibility

• Lead the vision, scope, and roadmap for security and risk initiatives across various platforms and product domains.
• Oversee the transition of security protocols from the initial design phase through to sustainable line organisation.
• Direct the activities of technical experts and analysts to ensure that architectural designs comply with risk and security requirements.
• Act as the primary authority for cross-domain security decisions and the main interface for senior stakeholders.
• Design and maintain governance models that define clear roles, responsibilities, and interfaces between technical teams and compliance functions.
• Balance regulatory obligations with technical feasibility to provide actionable guidance for delivery teams.
• Ensure consistent adoption of security architecture principles and patterns across the entire infrastructure.
• Align technical domains with internal and external standards, translating complex rules into procedural requirements.
• Manage the impact of regulatory changes on architecture and project delivery timelines.
• Build long-term capability through knowledge-sharing, training, and fostering a "security by design" culture.

Information Security Lead, Risk and Compliance Consultancy

Platform Engineer

• Design, deployment and operation of scalable Kafka clusters (on-prem, Azure, OpenShift)
• Configuration and operation of Kafka components (Broker, Connect, ksqlDB, among others)
• Implementation of security and authentication mechanisms
• Monitoring, log analysis and performance optimization
• Incident management including root cause analysis and post-mortems
• Automation using IaC and GitOps
• Capacity and cost optimization
• Documentation, best practices and team enablement

Platform Engineer – Apache Kafka, Confluent

Product Manager

• Support the PO team in managing two agile development teams.
• Requirements management, including structuring and documenting complex processes.
• Ensure quality in implementation.
• Close coordination with development teams and stakeholders.