DevOps Engineer for OAuth Token Issuer (IT-PW-IAM-2025-127-GRAE)

Your responsibilities

Are you passionate about secure, scalable infrastructure? CERN's Identity and Account Management (IAM) team is looking for a DevOps Engineer to help scale up our grid token issuers to meet the future needs of physics experiments, and support cutting-edge research across the globe.

As part of our supportive 9-person IAM team, you'll play a key role in developing and maintaining the authorisation services that underpin one of the world's largest and most advanced scientific computing infrastructures. Your tasks will consist of feature development, maintenance of OAuth Token Issuers running on Kubernetes, ensuring their reliability and scalability, and advanced user support (e.g. guiding technical users with their authorisation architectures).

Your profile

Skills:

• Proven experience in containerisation;
• Proven experience in Java development;
• Proven knowledge of OAuth2 and OIDC;
• Experience with Kubernetes a plus;
• Knowledge of X.509 certificates is a plus;
• Experience with GitOps methodologies (e.g. Kustomize, ArgoCD) is a plus;
• Spoken and written English or French, with a commitment to learn the basics of the other language.

Eligibility criteria:

• You are a national of a CERN Member or Associate Member State.
• By the application deadline, you have a maximum of two years of professional experience since graduation in Computer Science or Equivalent (or a related field) and your highest educational qualification is either a Bachelor's or Master's degree.
• You have never had a CERN fellow or graduate contract before.
• Applicants without University degree are not eligible.
• Applicants with a PhD are not eligible.

Contract duration: 24 months, with a possible extension up to 36 months maximum.

Working hours: 40 hours per week

Target start date: 01-October-2025

Job reference: IT-PW-IAM-2025-127-GRAE

Field of work: Software Engineering and IT

What we offer

• A monthly stipend ranging between 5196 and 5716 Swiss Francs (net of tax).
• Coverage by CERN's comprehensive health scheme (for yourself, your spouse and children), and membership of the CERN Pension Fund.
• Depending on your individual circumstances: installation grant; family, child and infant allowances; payment of travel expenses at the beginning and end of contract.
• 30 days of paid leave per year.
• On-the-job and formal training at CERN as well as in-house language courses for English and/or French.

About us

At CERN, the European Organization for Nuclear Research, physicists and engineers are probing the fundamental structure of the universe. Using the world's largest and most complex scientific instruments, they study the basic constituents of matter - fundamental particles that are made to collide together at close to the speed of light. The process gives physicists clues about how particles interact, and provides insights into the fundamental laws of nature. Find out more on http://home.cern.

Diversity has been an integral part of CERN's mission since its foundation and is an established value of the Organization. Employing a diverse workforce is central to our success.