Senior Identity and Access Management Engineer - Cloud

About the role

The Identity Management Support Team, part of the global Roche Digital Technology group, manages Directory and Identity Management services for customers using SailPoint. This senior role covers the multi-cloud Identity Management environment, focusing on Azure and Google Cloud Platform (GCP) while keeping consistency with AWS. It combines hands-on engineering with consultancy, incident ownership and stakeholder leadership.

Key responsibilities

• Design new solutions, provide consultancy, maintain and tune the underlying technologies, and drive continuous improvement
• Design and implement centralized Role-Based Access Control (RBAC) based on Cloud Adoption Framework principles, and enforce MFA, Identity Protection and Least Privilege policies, including IAM Deny Policies
• Build IAM infrastructure with Terraform and CI/CD pipelines in GitLab, and implement governance as code
• Support Just-in-Time privileged access mechanisms (e.g. Cyberark) so administrators have no standing privileges
• Provide 2nd and 3rd level support for the Identity Management infrastructure, monitoring performance, availability and capacity
• Mentor stakeholders, run workshops, resolve conflicts and define engagement strategies for complex initiatives

Required profile

• 5-7 years of experience in a major global organization, preferably in a regulated industry, with solutions aligned to security, validation, capacity and high availability
• Bachelor's degree in computer science, engineering or a related discipline, or equivalent recognized experience
• Proven track record as security incident lead or project owner, and as a trusted advisor to cross-functional stakeholders
• Strong English, and proven ability to work with people in different countries and cultures

Required skills

• SailPoint IQ and PingFederate, with strong hands-on IT operations background
• GCP IAM (synchronization, service account federation, organizational policies) and Azure IAM/RBAC, Azure Policy and CAF
• Terraform and CI/CD pipelines (GitLab)
• Computer Systems Validation experience in a validated environment