Enterprise Identity Management Engineer — Roche

Descrizione completa

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters. The Position We are seeking a Enterprise Identity Management Engineer to serve as a senior primary architect of our Enterprise Identity Management (IGA) future. This is a high-impact, hands-on role where you will design, build, and deliver next-generation identity solutions operating at global scale. Positioned at the intersection of security engineering and business enablement, you'll create resilient frameworks that protect critical systems while enabling seamless, automated access. As a technical visionary, you'll tackle the most complex identity challenges within our large-scale enterprise ecosystem. The Opportunity In this pivotal role, you will act as a primary architect driving the evolution of our Enterprise Identity Management strategy. You'll own the complete technical lifecycle, from designing scalable solutions to delivering resilient implementations across our global infrastructure. Main Responsibilities

• Lead end-to-end technical design of EIM solutions aligned with enterprise standards and security policies
• Define and standardize architecture patterns, best practices, and reusable frameworks
• Conduct design reviews and provide technical governance for scalable, high-quality implementations
• Translate security and business requirements into actionable technical solutions
• Architect, build, test, and deploy SailPoint-based IAM solutions from the ground up
• Deliver resilient identity solutions across complex, distributed environments
• Collaborate with cross-functional teams to ensure smooth implementation and production rollout
• Own delivery lifecycle end-to-end, including planning, estimation, timelines, and risk management
• Act as Tier 3 escalation point, leading root cause analysis and long-term fixes
• Drive innovation through PoCs and adoption of modern EIM Integrations (APIs, cloud integrations) Who You Are Core Expertise & Experience
• Minimum of 8 years of hands-on experience in Identity Management within large-scale, global environments.
• 3+ years experience working in a multinational work environment (Healthcare Industry experience a plus) as an Engineer/Technical team member
• Strong customer engagement and presentation skills with the ability to communicate across all levels (senior and/or small audiences)
• Deep technical expertise in SailPoint, specifically in design, custom development, troubleshooting, and architecture.
• Ability to work effectively with team members and virtual teams from different locations and different cultural background
• Ability to function independently with little supervision
• Advanced programming proficiency in Java for developing custom connectors, rules, and complex workflows.
• Proven experience implementing Integration solutions with Active Directory and cloud environments such as AWS, Azure, or GCP.
• Familiarity with CI/CD, DevOps, and modern architecture (APIs, microservices, cloud)
• Strong understanding of RBAC, Segregation of Duties (SoD), and access governance frameworks. Education
• Bachelor’s or Advanced degree in Computer Science, Cyber Security, Information Technology, or a related Engineering field.
• Professional Information Security certifications (e.g., CISSP) is a plus. If you're an experienced identity architect with deep SailPoint expertise, a passion for solving complex security challenges, and the drive to own end-to-end technical delivery in a multinational environment, we want to hear from you. Relocation benefits are not available for this job posti