PBAC Operations Engineer - RDT Identity & Access Management — Roche
- Location
- San Jose, Costa Rica
- Contract
- full-time
- Posted
- 8 days ago
Role overview
At Roche you can show up as yourself, embraced for the unique qualities you bring.
Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally.
This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come.
- At Roche you can show up as yourself, embraced for the unique qualities you bring.
- Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally.
- Key Responsibilities:
- Infrastructure Ownership & Strategy: Architect and maintain core PBAC components (PDP/PEP) for high availability.
Main responsibilities
- Key Responsibilities:
- Infrastructure Ownership & Strategy: Architect and maintain core PBAC components (PDP/PEP) for high availability.
- Lead the transition from initial use cases to enterprise-wide adoption, establishing global standards for policy-based authorization.
- Policy as Code (PaC) & DevOps: Drive the shift to PaC by designing automated CI/CD pipelines for versioning, testing, and deploying authorization logic like software.
Application process
- Integration & Consulting: Act as a primary consultant for global application and data owners to securely integrate systems via RESTful APIs, SQL/JDBC, and LDAP.
Company and context
- Problem Solving & Analytics: Lead the analysis of complex, highly ambiguous technical problems across organizational boundaries, driving comprehensive root-cause analysis and proactive risk mitigation.
- Stakeholder & Vendor Management: Partner with product managers, global developers, and senior management to design secure, user-friendly PBAC flows.
- Manage production environments using ITIL principles and coordinate with external vendors and Managed Service Providers (MSPs).
- Leadership & Continuous Improvement: Mentor team members, build expertise across the organization, and champion business process improvements within Communities of Practice (CoPs). Who You Are:
- Education: Bachelor's degree in a relevant technical field or equivalent work experience
- Experience: 8–15 years in IT/Security, with 5+ years strictly focused on Identity & Access Management (IAM) and specific expertise in PBAC/ABAC within large enterprise environments.
- Technical Mastery: Advanced, hands-on knowledge of XACML, decentralized policy management, and modern web frameworks under Zero Trust principles (RBAC and ABAC).
- IAM & DevOps Foundations: Highly proficient in SAML, OAuth, OIDC, SSO, and IGA.
- Experience writing custom integrations in Java or Python and deploying via Git-based CI/CD pipelines.
- Architectural Mindset: Strong advocate for systems thinking and enterprise-wide consulting advice.
Additional details
- Join Roche, where every voice matters.
- Leadership & Continuous Improvement: Mentor team members, build expertise across the organization, and champion business process improvements within Communities of Practice (CoPs).
- Communication: Fluent in English with exceptional interpersonal skills to navigate complex conflicts, build global consensus, and translate architectural concepts for non-technical stakeholders.
- Relocation benefits are not available for this posting. A healthier future drives us to innovate.
Notes and original content
- The Position
- The Opportunity:
- Who You Are:
- Relocation benefits are not available for this posting.
- Who we are
- A healthier future drives us to innovate.
Questions about this listing
What salary does Roche offer for this role?
Roche lists CHF 62'000 - 94'000 gross per year for this position in San Jose, Costa Rica. This is the salary published in the original listing (or, when the employer omits a figure, a realistic estimate for the role and sector) — the calculator on this site converts it to your actual net take-home once cross-border tax and social contributions are applied.
Is this a full-time role, and what type of contract does Roche offer?
This listing is a full-time position. The contract type shown here comes directly from the employer's original posting; always confirm exact hours, notice period and probation length with Roche during the application process, since these details can vary by role even within the same contract category.
Do I need a cross-border work permit for a role in Basel?
EU/EFTA residents living in the border zone of the country adjoining Canton Basel can apply for a G permit; the Swiss employer files it with that canton's migration office after the contract is signed. Border-zone rules and processing times vary by neighbouring country and canton, so confirm the specifics with Basel's cantonal migration office or with HR during the application.
How do I apply for this position at Roche?
Use the "Apply now" button on this page — it links directly to Roche's original listing at roche.wd3.myworkdayjobs.com, so your application goes straight to the employer's own applicant-tracking system. Frontaliere Ticino does not collect or forward applications itself.
