Zero Trust Engineer

DB Global Technology is Deutsche Bank’s technology centre in Central and Eastern Europe. Since its set-up in 2013, Bucharest Technology Centre (BEX) has constantly proven its capacity to deliver global technology products and services, playing a dynamic role in the Bank’s technology transformation.

We have a robust, hands-on engineering culture dedicated to continuous learning, knowledge-sharing, technical skill development and networking. We are an essential part of the Bank’s technology platform and develop applications for many important business areas.

The End User Computing organisation delivers secure connectivity and access services for Deutsche Bank employees. The Zero Trust Senior Engineer will engineer, improve and support secure internet and private application access services in a large, regulated enterprise environment.

The role requires a strong understanding of Zero Trust concepts and practical experience contributing to technology projects from design through implementation and operational handover. Experience with enterprise secure access platforms is important. Zscaler Internet Access and Zscaler Private Access skills are a strong benefit, while experience with REST APIs for automation is a separate nice-to-have capability.

Responsibilities

• Engineer, configure and improve Zero Trust solutions for secure internet and private application access.
• Translate security, network and business requirements into reliable technical designs and implementation plans.
• Apply Zero Trust principles to user, device, internet and private application access.
• Contribute to engineering projects, including requirements analysis, design, testing, implementation, documentation and handover to Operations.
• Troubleshoot complex connectivity, policy, authentication and application-access issues, and coordinate vendor escalation where required.
• Work with network, security, identity, cloud, endpoint and application teams to deliver integrated solutions.
• Create and maintain technical designs, implementation procedures, test cases, release notes and operational documentation.
• Identify opportunities to improve service reliability, user experience, monitoring and operational efficiency.
• Ensure solutions follow the company’s engineering, security, software development lifecycle and release-management requirements.

Skills

• Strong understanding of Zero Trust principles and their practical application to internet and private application access.
• Hands-on engineering experience with enterprise secure access, secure web gateway, zero trust network access or similar security platforms.
• Experience designing, implementing or operating secure access solutions in a large enterprise environment.
• Experience working in technology projects and contributing across design, build, testing, implementation and handover activities.
• Strong understanding of enterprise networking concepts, including IP, routing, DNS, TLS, proxies, firewalls and network troubleshooting.
• Experience with identity and access technologies such as SAML-based authentication, multi-factor authentication, certificates and Conditional Access.
• Ability to analyse complex technical problems, identify root causes and implement sustainable solutions.
• Ability to produce clear technical documentation and communicate effectively with technical and non-technical stakeholders.
• Hands-on engineering experience with Zscaler Private Access.
• Experience configuring, troubleshooting and improving enterprise policies across Zscaler services.
• Experience using REST APIs to automate configuration, policy management, reporting or operational processes.
• Experience with scripting or automation languages such as Python.
• Knowledge of tools such as Jira, Confluence, Splunk, Wireshark, Fiddler and ServiceNow.

Proven ability to leverage AI tools to enhance productivity, optimise workflows to solve business problems, while applying critical judgment to ensure responsible and ethical use of data and AI outputs.

Well-being & Benefits

Emotionally and mentally balanced: We support you in dealing with life crises, maintaining stability through illness, and maintaining good mental health.

• Empowering managers who value your ideas and decisions. Show your positive attitude, determination, and open-mindedness.
• A professional, passionate, and fun workplace.
• A modern office with fun and relaxing areas to boost creativity.
• Continuous learning culture with coaching and support from team experts.
• A culture where you can openly speak about mental health.

Physically thriving: We support you in managing your physical health by taking appropriate preventive measures and providing a workplace that helps you thrive. For example, Private healthcare and life insurance with premium benefits for you and discounts for your loved ones, healthier ways of working and check-ups.

Socially connected: We strongly believe in collaboration, inclusion and feeling connected to open up new perspectives and strengthen our self-confidence and well-being.

• 24 days holiday, loyalty days, and bank holidays (including weekdays for weekend bank holidays).
• Hybrid working model with 40% remote work.
• Options for flexible working hours.
• Enjoy retailer discounts, cultural and CSR activities, workshops, and more.

Financially secure: We support you in meeting personal financial goals during your active career and for the future.

• Competitive income, performance-based promotions, and a sense of purpose.
• Meal vouchers, bonuses for referrals

Interested in more: discover what our employees value in the Well-being & Benefits hub!

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.

Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.

We welcome applications from all people and promote a positive, fair and inclusive work environment.