Senior Identity And Access Management Engineer

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.
The PositionThe Security and Cybersecurity Analyst serves as a trusted advisor and independent leader who drives the analysis of moderately complex cybersecurity incidents and technical problems. By bridging deep business and technical understanding, you will manage end‑to‑end security analysis tasks across multiple products within a domain. You will shape stakeholder perspectives, champion accountability by taking on security incident lead or project owner roles, and foster continuous improvement in security operations and best practices.
Description of the areaThe Identity Management Support Team manages and operates the solutions and components used to provide customers with Directory and Identity Management Services using SailPoint. We are part of a global Roche Digital Technology group (RDT).
Job ResponsibilitiesIn this role, you are mainly responsible for the multi‑cloud Identity Management environment, focusing specifically on Azure and Google Cloud Platform (GCP), while maintaining consistency with AWS. This includes the design of new solutions, consultancy, maintenance, performance, tactical lifecycle management and continuous improvement of the underlying technologies.
ScopeStrong background in IAM concepts at design level and evolution in Cloud environments, Azure and/or GCPContributes to the design of new solutions based on SailPoint and PingFederate, AD, Privilege Access Management.
Design and implement Centralized Role-Based Access Control (RBAC) based on Cloud Adoption Framework (CAF) principlesAccess Governance and Controls: Enforce strong security controls across cloud environments, including Multi-Factor Authentication (MFA) and Identity Protection. Implement Least Privilege policies, often involving custom roles and organizational-level controls. Implement IAM Deny Policies to strictly block high-risk actions, ensuring separation of dutiesAutomation and Infrastructure-as-Code (IaC): Drive the core value of "Automate as much as possible". Design and implement IAM infrastructure using IaC, leveraging Terraform. For Azure, this mandates IaC using Terraform and Azure Verified Modules (AVM) with CI/CD pipelines in GitLabPrivileged Access Management (PAM): Design and support Just-in-Time (JIT) Access mechanisms, ensuring no standing privileges for administrators, using tools like Cyberark for Just-in-Time accessOperational Excellence: Act as an expert in the release management activities, providing 2nd and 3rd level support for the Identity Management Infrastructure. Proactively monitor systems for performance, availability, and capacity managementActively focus on self‑development in creating actionable plans to improveStakeholder ManagementConsultancy and Collaboration: Act as a mentor and reference, working closely with stakeholders to provide the right level of consultancy. Ensure regular interactions with the Managed Service ProviderActs as a strategic influencer, defining and driving stakeholder engagement strategies for complex initiatives, facilitating workshops, resolving conflicts, and proactively shaping stakeholder perspectives to align with project goalsImpact/StrategyDemonstrates strong and consistent performance across diverse products, with an impact that typically extends to a specific product, initiative, or clusterTranslates requirements into strategic implementation plans that align with overall business objectives, and takes a proactive role in shaping team processes, often contributing to Communities of Practice (CoPs)ComplexityManages business analysis activities on more complex projects or across multiple products within a domainCapable of handling ambiguous requirements, navigating intricate stakeholder environments, and evaluating solution impacts considering both immediate and longer‑term implications within the domainBusiness/Technical abilityDemonstrates a strong understanding of the business domain, related technologies, and their interdependenciesCan independently apply tools, principles, concepts, and techniques related to requirements, data, usability, and process analysis, effectively managing interconnections to improve overall efficiency and effectivenessQualificationsEducation / Experience5-7 years of experience working in a major global organization, preferably in a regulated industry and in providing solutions aligned with standards, security, validation, capacity and high availabilityBachelor’s Degree in computer science, engineering or related discipline; or recognition of priorworking experience which is