Identity and Access Engineer (a), 100% — Bachem AG

This position is no longer active. Below you'll find the original details and similar positions.

Geographic detail

This page corresponds to the job slug identity-and-access-engineer-f-m-d-100-bachem-bubendorf (trailing token: 100 Bachem Bubendorf).

The reference location stated in the job ad is Bubendorf, Canton of Ticino. Remote-tagged roles still retain the city reference for tax, contract and G Permit enrolment purposes.

Original description

To drive our continuous organic growth, we are constantly looking for highly qualified professionals. To strengthen our team in the Global IT, Security and Compliance (S&C) department, we are seeking an experienced IAM & Access Control Engineer (a), 100%. Reporting to the Head of Security Operation and Architecture and working within the CISO organization, you will reinforce the existing IAM platform ownership and management capabilities. This role complements and reinforces the existing IAM platform capabilities by bringing additional depth in access control enforcement, privileged access hardening and Zero Trust implementation. Our Identity team operates the One Identity platform and Microsoft Entra ID as the central control layer governing authentication, authorization, and privileged access across IT, OT, laboratory, and cloud environments. You will strengthen our identity governance capabilities with a strong focus on One Identity Manager, while contributing to access control enforcement and the evolution of our identity security model. Your tasks: This role focuses on identity governance and platform engineering rather than operational access request handling: • Operate, extend and optimize the One Identity platform by onboarding new applications and entitlements into the governance model. • Design, implement and optimize identity governance workflows, role models and target system integrations within One Identity Manager. • Collaborate with external developers and internal stakeholders to evolve and maintain the One Identity platform. • Improve identity data quality, reconciliation processes and entitlement structures. • Support the design and implementation of Conditional Access policies in Microsoft Entra ID and contribute to authentication hardening initiatives. • Integrate applications into SSO (SAML/OIDC) and standardize strong authentication mechanisms (MFA, step-up authentication). • Support the implementation of Privileged Access and PIM capabilities

Job details

  • Company: Bachem AG
  • Position: Identity and Access Engineer (a), 100%
  • Location: Bubendorf, Ticino
  • Sector: Sanità / Ospedali
  • Expired on: 2026-06-24

More jobs at Bachem AG

Similar jobs in Ticino

Browse our complete job board with over 1000 active positions in Ticino.

Search for more jobs near Bubendorf: Jobs in Ticino

Find your next opportunity as a cross-border worker in Switzerland.

Information for cross-border workers

Bachem AG is located in Bubendorf in the Canton of Ticino. Cross-border workers need a G Permit, renewable annually, to work in Switzerland. The Canton of Ticino applies withholding tax at variable rates on gross income. Since 2024, the New Tax Agreement introduces concurrent taxation between Italy and Switzerland.

Swiss social contributions include AVS (5.3%), unemployment insurance (1.1%) and LPP (occupational pension). Use our free tax simulator to calculate your net salary and compare the cost of living between Switzerland and Italy.

G permit and residence. To apply for this position as a cross-border worker you must reside in an Italian municipality within the 20 km border zone (Lombardy or Piedmont) and return home at least once a week. The employer files the G permit at the cantonal migration office after the contract is signed: first issuance takes 2-6 weeks and is then renewed yearly. Full-time remote work from Italy is not compatible with cross-border status; extended absences from the Italian home (more than a working week without returning) jeopardise the fiscal regime.

Net salary and the 2024 fiscal agreement. The gross salary advertised here is withheld at source by the Swiss employer at effective rates between 5 % and 19 % in the Canton of Ticino depending on income, marital status and dependants. Cross-border workers hired on or after 1 January 2024 fall under the new Italy-Switzerland concurrent regime: Italy taxes foreign employment income while granting a tax credit on Swiss withholding up to 80 %, declared in section RW of the Italian tax return. Together with social charges the typical gross-to-net gap is 18-28 %. For a personalised calculation on the gross offered by Bachem AG open the salary simulator.

Commute and quality of life. Working in Bubendorf means a daily commute that depends on which crossing you use: Brogeda (A2 motorway) and Chiasso-strada cover the Mendrisiotto and Luganese areas; Stabio and Gaggiolo serve commuters from the Varese province; Ponte Tresa is the historic gateway for Luino and the Verbano lake region. At peak times a Como-Lugano leg runs 25-50 minutes; Varese-Lugano typically takes 35-60. For those considering relocation to Ticino, average rent for a 3.5-room flat in Lugano is CHF 1,500-2,200/month, against EUR 600-900 for an equivalent unit in the province of Como. The Swiss healthcare network (LAMal) offers shorter access times than the Italian SSN but at a monthly premium of CHF 350-500 per adult — a substantial line item in any net-vs-net comparison.

Frequently asked questions

What is the net salary for a cross-border worker in Ticino?
Net salary depends on gross income, marital status and number of children. In the Canton of Ticino, withholding tax ranges from about 2% to 15%. Together with AVS-AI-IPG (5.3%), unemployment insurance (1.1% up to CHF 148,200/year) and LPP (7-18% by age), the typical gross-to-net gap is 18-28%. Use our simulator for a personalised calculation against this listing.
Do cross-border workers need Swiss LAMal health insurance?
New cross-border workers since 2024 must enrol in Swiss LAMal within 3 months of starting work, unless they exercise the right of option to stay in the Italian SSN. Premiums vary by canton, insurance model (standard, family doctor, telmed, HMO) and deductible (CHF 300 minimum up to 2,500 maximum): compare LAMal premiums.
How do I get a G permit to work in the Canton of Ticino?
The G permit is filed by the employer at the cantonal migration office after the contract is signed. First issuance takes 2-6 weeks; the permit is renewed yearly up to the contractual limit. You must reside in an Italian municipality within the 20 km border zone (Lombardy or Piedmont) and return home at least once a week. Full-time remote work from Italy is not compatible with the status.
13th-month salary, vacation and overtime: what does Swiss law say?
The 13th salary is not statutory but is standard practice in Ticino and almost always specified in the contract: paid in December or split into two tranches (June + November). Minimum statutory holiday is 4 weeks (5 weeks for under-20s and over-50s with seniority). Overtime above 40-45 weekly hours, under the Labour Act (LL), is compensated with a 25% premium or equivalent time off within 14 weeks.
What documents do I need to apply for a Swiss job?
For the initial application: CV (European or Swiss format, in a cantonal language), cover letter, and a recent work certificate. After the contract is signed: valid ID card (passport recommended), Italian residence certificate, birth certificate for the G-permit filing, and — for regulated sectors (healthcare, schools, security) — recognition of the Italian degree by SBFI/SEFRI or the relevant cantonal authority, a process that takes 3-6 months.

Similar open positions in Ticino →