Cybersecurity Analyst - Privileged Access ManagementRoche · Petaling Jaya, Selangor, Malaysia

Cybersecurity Analyst - Privileged Access Management

🗓️ Posted 2026-08-21 Petaling Jaya, Selangor, Malaysia Full-time Hybrid ICT
💰 Salary Not shared 📊 Market RM12,000–RM18,000/mo

About the Company

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come.

Responsibilities

  • ● Drive HashiCorp Vault platform delivery in partnership with the product owner - leading initiatives to upgrade and automate privileged access controls across the enterprise
  • ● Design and deploy automation scripts and integrations to streamline Vault operations and reduce manual effort
  • ● Build self-service portals and APIs that make secret usage effortless for application teams, embedding DevSecOps principles into access processes
  • ● Integrate secrets management into CI/CD pipelines and IaC toolchains across major cloud platforms
  • ● Monitor, maintain, and evolve PKI infrastructure including certificate lifecycle management via platforms such as Keyfactor and RedHat IDM
  • ● Implement certificate automation standards such as ACME for internal issuance and integrate PKI workflows into deployment pipelines
  • ● Secure containerised environments through mutual TLS implementation
  • ● Act as the Tier 3 escalation point for complex PAM and HashiCorp Vault issues - providing advanced troubleshooting, guidance, and architectural direction

Requirements

  • ● You hold a Bachelor's Degree in Computer Science, Engineering, or a related discipline - or bring equivalent experience that demonstrates the same depth of knowledge
  • ● You have 3-5 years of hands-on experience in cybersecurity or identity and access management, ideally within a large, global, or regulated organisation
  • ● You work well independently, take ownership of your deliverables, and have a track record of not just maintaining security systems - but actively improving them
  • ● You have configured and administered HashiCorp Vault in a team environment, with practical experience across secrets engines, auth methods, and policy management
  • ● You understand CA hierarchy, certificate issuance and renewal, and have worked with platforms such as Keyfactor and RedHat IDM