Senior System Engineer/Architect (Fokus OneIdentity und IAM-Gesamtarchitektur) 80-100% — Universitätsspital Zürich (USZ)
- Location
- Zürich
- Contract
- Full-time
- Posted
- 18 days ago
Full description
USZ Stettbach
By agreement
You are the technical heart of our IAM solution and take on the role of lead engineer and architect for our central identity governance platform. Together with Product Owner and Team Coach, you will shape the technical future of our IAM landscape and ensure a sustainable, scalable and secure architecture. You look outside the box (Privileged Access Management, Partner IAM, Customer IAM) and ensure that all components merge into a secure and efficient overall system, while consistently focusing on standardization.
Your tasks
- Lead for the OneIdentity architecture and engineering: You are responsible for the technical architecture within the OneIdentity suite (designer, manager, web designer and object browser). You implement complex business logics and approval workflows, but always prefer standard functionalities over complex customizing
- IAM overall understanding and coordination: You understand the identity flows across all systems. You will advise product owners and specialist areas on the technical impact of requirements and ensure that architecture principles and IAM guidelines are taken into account in the solutions
- Architecture functions (Tech-Lead): You coach the engineers on technical issues, promote knowledge transfer within the team, carry out architecture and code reviews (QS) and evaluate solution variants on their sustainability. In addition, you are responsible for the architectural documentation and plan to reduce the technical legacy loads
- Technical contact for application integrations: You act as a technical counterpart to the IAM onboarding team and advise them on the connection of complex applications to the IAM system. You define the technical integration paths and ensure that new systems are connected according to the architectural specifications
- Roadmap and further development: You define the roadmap for the further development of the OneIdentity platform towards a modern cloud identity architecture (Entra ID). You support the Product Owner in the technical evaluation and architecture planning of the further development of the OneIdentity platform and derive technical requirements and architecture decisions from this
- Support for AD and Entra ID: You have in-depth knowledge in the hybrid Microsoft environment and support the team in the AD/Entra ID area in engineering and advise on the technical connection to the IAM
- 3rd level Support and DevOps: You solve deep-seated problems (e.g. SQL errors, synchronization conflicts) and optimize processes sustainably to continuously increase the efficiency of IAM operations
Your profile
- Training: Completed degree in computer science, training as a computer scientist or a comparable technical qualification
- IAM expertise: Several years of professional experience in the administration and engineering of complex IAM systems and hybrid architectures (AD, Entra ID)
- OneIdentity Deep Dive: In-depth knowledge in the OneIdentity Manager (or a comparable IGA/IAM tool). You understand the data model and can technically map business logic
- Technical overall understanding: In-depth knowledge in the Microsoft environment (Active Directory, Entra ID and M365) as well as very good SQL and PowerShell knowledge. You understand technical connections across system boundaries, support Microsoft specialists at eye level and are able to read, analyze and adapt scripts and business logics in the OneIdentity environment (e.g. VB.NET/C#) if necessary.
- Methodological leadership: Experience in the methodological leadership of (external) partners or engineers in complex IAM implementations without direct line responsibility
- Plus Infrastructure as Code (IaC): Ideally, you will have experience with IaC concepts (e.g. git pipelines) to automate and professionalize the deployment and configuration of the IAM system landscape.
- Architecture Mindset: In-depth knowledge of role and rights management and access governance. You can technically justify technological decisions and represent them to various stakeholders
- Languages: Very good knowledge of German and English
Our offer
With us, you work in an agile SAFe environment and take on a central technical role in our IAM team. Together with Product Owner and Team Coach, you shape the future of our identity platform. You get a lot of freedom for technical decisions, bring your own ideas and shape the architecture of a strategically important platform for the USZ. Flexible working hours and the opportunity to work in the home office help you to combine work and private life well. For this post, dossiers from recruiters cannot be considered. Thank you for your understanding. Our Benefits
Kita on site
In our in-house daycare centers, your children will be cared for lovingly. Long opening hours without company holidays and subsidized care places relieve you in everyday life.
Health
We support your health. In addition to personal consultations and courses of our health management that promote your well-being, we offer you access to over 120 sports with a subsidized annual subscription to the ASVZ.
Flexibility
We promote a balanced work-life balance: Almost half of our employees work part-time, and about 50% of the tasks can be done in the home office – if your working day allows it.
Family friendliness
We help you to reconcile family and work. Mothers are entitled to at least 6 months of maternity leave (of which 16 weeks are paid in full), fathers to at least 2 months of paternity leave (of which 2 weeks are paid in full).
Further education and development
We accompany you on your professional path and support your development with individual career and further education opportunities.
Insurance
We cover 60% of your pension fund contributions and offer attractive special conditions for supplementary insurance.
Mobility
You benefit from a personal ZVV BonusPass at a special price or receive a fixed amount of money for a general subscription (GA) or half-tax PLUS.
Telephony
You and your family members benefit from special conditions for private mobile subscriptions. Other advantages: Details
Reports from everyday work
At USZ, people from over 120 different professional groups work, from IT to dietary kitchens to clinic management. What unites them: the experience that the USZ opens up paths that were never thought possible. Find out more in the reports of our colleagues. On the reports Career and development
Questions about this listing
What salary does Universitätsspital Zürich (USZ) offer for this role?
The original listing does not state a salary. Our estimate for this role and sector in Zürich is CHF 113'500 - 172'000 gross per year — an estimate, not a figure communicated by Universitätsspital Zürich (USZ). The calculator on this site converts a gross salary into your actual net take-home once cross-border tax and social contributions are applied.
Is this a full-time role, and what type of contract does Universitätsspital Zürich (USZ) offer?
This listing is a full-time position. The contract type shown here comes directly from the employer's original posting; always confirm exact hours, notice period and probation length with Universitätsspital Zürich (USZ) during the application process, since these details can vary by role even within the same contract category.
Do I need a cross-border work permit for a role in Zürich?
EU/EFTA residents living in the border zone of the country adjoining Canton Zürich can apply for a G permit; the Swiss employer files it with that canton's migration office after the contract is signed. Border-zone rules and processing times vary by neighbouring country and canton, so confirm the specifics with Zürich's cantonal migration office or with HR during the application.
How do I apply for this position at Universitätsspital Zürich (USZ)?
Use the "Apply now" button on this page — it links directly to Universitätsspital Zürich (USZ)'s original listing at career012.successfactors.eu, so your application goes straight to the employer's own applicant-tracking system. Frontaliere Ticino does not collect or forward applications itself.
