Senior Enterprise Identity Management Engineer — Roche
- Location
- Pune
- Contract
- full-time
- Posted
- 8 days ago
Role overview
At Roche you can show up as yourself, embraced for the unique qualities you bring.
Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally.
This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come.
- At Roche you can show up as yourself, embraced for the unique qualities you bring.
- Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally.
- Job responsibilities
- Lead end-to-end technical design of EIM solutions aligned with enterprise standards and security policies
- and Core Expertise
- Minimum of 8 years of hands-on experience in Identity Management within large-scale, global environments.
Main responsibilities
- Job responsibilities
- Lead end-to-end technical design of EIM solutions aligned with enterprise standards and security policies
- Define and standardize architecture patterns, best practices, and reusable frameworks
- Conduct design reviews and provide technical governance for scalable, high-quality implementations
- Translate security and business requirements into actionable technical solutions
- Architect, build, test, and deploy SailPoint-based IAM solutions from the ground up
- Deliver resilient identity solutions across complex, distributed environments
- Collaborate with cross-functional teams to ensure smooth implementation and production rollout
- Own delivery lifecycle end-to-end, including planning, estimation, timelines, and risk management
- Act as Tier 3 escalation point, leading root cause analysis and long-term fixes
Key requirements
- and Core Expertise
- Minimum of 8 years of hands-on experience in Identity Management within large-scale, global environments.
- 3+ years experience working in a multinational work environment (Healthcare Industry experience a plus) as an Engineer/Technical team member
- Strong customer engagement and presentation skills with the ability to communicate across all levels (senior and/or small audiences)
- Deep technical expertise in SailPoint IdentityIQ, specifically in design, custom development, troubleshooting, and architecture.
- Ability to work effectively with team members and virtual teams from different locations and different cultural background
- Ability to function independently with little supervision
- Advanced programming proficiency in Java for developing custom connectors, rules, and complex workflows.
- Proven experience implementing Integration solutions with Active Directory and cloud environments such as AWS, Azure, or GCP.
- Familiarity with CI/CD, DevOps, and modern architecture (APIs, microservices, cloud)
- Strong understanding of RBAC, Segregation of Duties (SoD), and access governance frameworks. Education
- Bachelor’s or Advanced degree in Computer Science, Cyber Security, Information Technology, or a related Engineering field.
Additional details
- Join Roche, where every voice matters. Qualifications and Core Expertise
- Strong understanding of RBAC, Segregation of Duties (SoD), and access governance frameworks.
- Professional Information Security certifications (e.g., CISSP) is a plus. A healthier future drives us to innovate.
Notes and original content
- Join Roche, where every voice matters.
- The Position
- Qualifications and Core Expertise
- Professional Information Security certifications (e.g., CISSP) is a plus.
- Who we are
- A healthier future drives us to innovate.
Questions about this listing
What salary does Roche offer for this role?
Roche lists CHF 85'500 - 129'500 gross per year for this position in Pune. This is the salary published in the original listing (or, when the employer omits a figure, a realistic estimate for the role and sector) — the calculator on this site converts it to your actual net take-home once cross-border tax and social contributions are applied.
Is this a full-time role, and what type of contract does Roche offer?
This listing is a full-time position. The contract type shown here comes directly from the employer's original posting; always confirm exact hours, notice period and probation length with Roche during the application process, since these details can vary by role even within the same contract category.
Do I need a cross-border work permit for a role in Basel?
EU/EFTA residents living in the border zone of the country adjoining Canton Basel can apply for a G permit; the Swiss employer files it with that canton's migration office after the contract is signed. Border-zone rules and processing times vary by neighbouring country and canton, so confirm the specifics with Basel's cantonal migration office or with HR during the application.
How do I apply for this position at Roche?
Use the "Apply now" button on this page — it links directly to Roche's original listing at roche.wd3.myworkdayjobs.com, so your application goes straight to the employer's own applicant-tracking system. Frontaliere Ticino does not collect or forward applications itself.
