Senior Enterprise Identity Management Expert

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections,  where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.

The Position

As a Senior EIM Engineer you will act as a primary architect of the Enterprise Identity Management (IGA) future. In this high-impact hands-on role, you will design, build, and deliver next-generation identity solutions that operate at a global scale.

Operating at the intersection of security engineering and business enablement, you will be responsible for creating resilient frameworks that protect critical systems while ensuring seamless, automated access.

You are not just a contributor; you are a technical visionary tasked with solving the most complex identity challenges in a large-scale enterprise ecosystem.

Job responsibilities

Lead end-to-end technical design of EIM solutions aligned with enterprise standards and security   policies

Define and standardize architecture patterns, best practices, and reusable frameworks

Conduct design reviews and provide technical governance for scalable, high-quality   implementations

Translate security and business requirements into actionable technical solutions

Architect, build, test, and deploy SailPoint-based IAM solutions from the ground up

Deliver resilient identity solutions across complex, distributed environments

Collaborate with cross-functional teams to ensure smooth implementation and production rollout

Own delivery lifecycle end-to-end, including planning, estimation, timelines, and risk management

Act as Tier 3 escalation point, leading root cause analysis and long-term fixes

Drive innovation through PoCs and adoption of modern EIM Integrations (APIs, cloud integrations)

Qualifications and Core Expertise

Minimum of 8 years of hands-on experience in Identity Management within large-scale, global environments.

3+ years experience working in a multinational work environment (Healthcare Industry experience a plus) as an Engineer/Technical team member

Strong customer engagement and presentation skills with the ability to communicate across all levels (senior and/or small audiences)

Deep technical expertise in SailPoint, specifically in design, custom development, troubleshooting, and architecture.

Ability to work effectively with team members and virtual teams from different locations and different cultural background

Ability to function independently with little supervision

Advanced programming proficiency in Java for developing custom connectors, rules, and complex workflows.

Proven experience implementing Integration solutions with Active Directory and  cloud environments such as AWS, Azure, or GCP.

Familiarity with CI/CD, DevOps, and modern architecture (APIs, microservices, cloud)

Strong understanding of RBAC, Segregation of Duties (SoD), and access governance frameworks.

Education

Bachelor’s or Advanced degree in Computer Science, Cyber Security, Information Technology, or a related Engineering field.

Professional Information Security certifications (e.g., CISSP) is a plus.

#RDT

 

 

Who we are

A healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.

Let’s build a healthier future, together.

Roche is an Equal Opportunity Employer.