75% remote: QA Engineer (f/m/d) for PKI / Secrets Management

For our client we are looking for a QA Engineer (f/m/d) for PKI / Secrets Management. Start: 20.10.2025Duration: 3 months, + wish for a long-term prolongationCapacity: 80-100%Location: 75% Remote, 25% Berlin (1 week Berlin / 3 weeks remote in rotation), up to 50% onsite in peak timesLanguage: English is a must, German is a plusBudget: 80,00 EUR netRole:The IAM Service is responsible for the conception and designing of identity and access management (IAM) services for the platform. The primary goals are providing a scalable, secure, and federated access to applications, ensuring seamless integration across the hybrid cloud environment.Objectives:- Core Vault Knowledge- Give recommendations and write test cases for:o Secrets lifecycle (creation, lease renewal, revocation).o PKI workflows (CSR submission, certificate issuance, CRL checks, revocation).o Authentication methods (AppRole, LDAP, Kubernetes, OIDC).o Validating access policies (ACLs) — ensuring least privilege is enforced.- Automation & Scripting- PKI-Specific Testing.- Integration Testing.- Security & Compliance Validation.- Monitoring & TroubleshootingSkills (must-have):- Experience with testing Vault fundamentals and PKI workflows.- Expertise with test automation frameworks for services, APIs, IAM.- Strong experience with scripting and automation: Python, Go, Bash, PowerShell.- Expertise with PKI/SSL debug tools: OpenSSL, certutil, Wireshark.- Strongly skilled with CI/CD integration: Jenkins, GitHub Actions, GitLab CI.- Experience with Secrets and compliance testing: audit logs, RBAC/MFA, standards validation.- Experienced with browser-based automation: Playwright or Selenium.- Experienced as a quality gate for PKI, Vault, and IAM services.- Good knowledge of how Vault integrates with apps (via API the Vault Agent and sidecar injector)Skills (should-have):- Experience with cloud services and their configuration- Knowledge about IAM solutions based on OpenID Connect (OIDC), such as Keycloak, for auth backends and performance testing- Fluent in German- Familiarity with HA/DR scenarios in PKI/Secrets/IAM.- Working with Scrum and general experience in agile frameworks