Senior Enterprise Identity Management Engineer
Job Description
At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.
The Position
Senior Enterprise Identity Management Engineer
As a Senior EIM Engineer you will act as a primary architect of the Enterprise Identity Management (IGA) future. In this high-impact hands-on role, you will design, build, and deliver next-generation identity solutions that operate at a global scale. Operating at the intersection of security engineering and business enablement, you will be responsible for creating resilient frameworks that protect critical systems while ensuring seamless, automated access. You are not just a contributor; you are a technical visionary tasked with solving the most complex identity challenges in a large-scale enterprise ecosystem.
Job responsibilities
Lead end-to-end technical design of EIM solutions aligned with enterprise standards and security policies
Define and standardize architecture patterns, best practices, and reusable frameworks
Conduct design reviews and provide technical governance for scalable, high-quality implementations
Translate security and business requirements into actionable technical solutions
Architect, build, test, and deploy SailPoint-based IAM solutions from the ground up
Deliver resilient identity solutions across complex, distributed environments
Collaborate with cross-functional teams to ensure smooth implementation and production rollout
Own delivery lifecycle end-to-end, including planning, estimation, timelines, and risk management
Act as Tier 3 escalation point, leading root cause analysis and long-term fixes
Drive innovation through PoCs and adoption of modern EIM Integrations (APIs, cloud integrations)
Qualifications and Core Expertise
Minimum of 8 years of hands-on experience in Identity Management within large-scale, global environments.
3+ years experience working in a multinational work environment (Healthcare Industry experience a plus) as an Engineer/Technical team member
Strong customer engagement and presentation skills with the ability to communicate across all levels (senior and/or small audiences)
Deep technical expertise in SailPoint, specifically in design, custom development, troubleshooting, and architecture.
Ability to work effectively with team members and virtual teams from different locations and different cultural background
Ability to function independently with little supervision
Advanced programming proficiency in Java for developing custom connectors, rules, and complex workflows.
Proven experience implementing Integration solutions with Active Directory and cloud environments such as AWS, Azure, or GCP.
Familiarity with CI/CD, DevOps, and modern architecture (APIs, microservices, cloud)
Strong understanding of RBAC, Segregation of Duties (SoD), and access governance frameworks.
Education
Bachelor’s or Advanced degree in Computer Science, Cyber Security, Information Technology, or a related Engineering field.
Professional Information Security certifications (e.g., CISSP) is a plus.
#RDT2026
Who we are
A healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.
Let’s build a healthier future, together.
Roche is an Equal Opportunity Employer.