Sr. IAM Engineer

Job description

·  Job facts

Sr. Identity & Access Management Engineer

Job Summary :

A deeply skilled IAM Engineer who thrives in solving a variety of complex business problems through practical and ingenious application of technologies.

Our Senior Engineers work on complex issues and needs where analysis of situations or data requires an in-depth evaluation of variable factors, including technology dependencies, inter-organizational impact and systems thinking approaches.

Possess in-depth knowledge in at least two technology areas within Identity and Access management solution area and a working knowledge of a majority of the solutions in Roche IAM space. They have a detailed understanding of how the Roche IAM infrastructure in their areas of responsibility impacts respective Roche business processes. Contribute to and technically lead challenging projects which require deep technical knowledge and IAM engineering skills. They are accountable and responsible for decision-making in technical design, build and testing, in the context of the projects/ activities to which they are assigned. In doing so, they exercise sound judgement, balanced with effective consultative engagement of key stakeholders, in the methods and techniques chosen to obtain the desired results. Have the required skills, experience and depth of knowledge to be able to influence significantly both IAM vendor product selections and improvements.

Job Responsibilities:

·  To lead and contribute to the end-to-end design of infrastructure solutions and the creation and maintenance of related component standards
·  To produce and maintain sufficient documentation for the designs, design patterns, and component standards created or maintained
·  To interact with senior internal and external partners on significant technical matters as they relate to prioritized objectives
·  To strengthen the overall Engineering community by building bridges and collaborating with Principal Engineers, Senior Engineers, Engineers and Associate Engineers in other infrastructure solution areas
·  To contribute to determining success criteria and evaluation of promising solutions/technologies via Proofs of Concept (PoCs) and feasibility studies across two or more areas within their infrastructure solution area, as they relate to meeting Roche's business needs
·  To architect (as solution architect), design, build, test, and implement (first-time deployments) integrated, resilient and reliable solutions in multiple solution areas
·  To lead small-to-medium sized technical teams for specific objectives in medium-to-large initiatives (projects, lifecycle work, Proofs of Concept, etc.) and to provide the expert guidance required to drive technical developments in these initiatives
·  To advise, influence, collaborate with, and integrate feedback from various IT partners including Enterprise Architects, Solution Owners, Component Owners and line-of-business stakeholders
·  To ensure designs and solutions in their respective infrastructure solution area align and adhere to the organization's Technical Architecture Framework (TAF) policies, standards and directions
·  To map the technology roadmaps into portfolio projects/activities and to estimate resources, dependencies, risks, and timelines required to deliver these projects/activities successfully
·  To contribute to the efforts to estimate Engineering resources and timelines to deliver projects/activities successfully
·  To contribute to and/or write position papers, white papers, technical recommendations and best practices including use cases for their infrastructure solution space
·  To remain proactive and aware of operational challenges and opportunities and work with support team staff to resolve incidents and major incidents
·  To ensure solutions and components implemented comply Quality/Regulatory standards, as applicable
·  Define cloud architecture, design and implementation plans for hosting IAM application workloads on cloud
·  Provide cloud technical expertise including strategic design and architectural mentorship, assessments, POCs, etc.
·  Perform various development activities for DevOps practices for the project, including continuous integration, continuous delivery, continuous testing, and continuous monitoring.
·  Design continuous integration best practices for the development team using Docker, Ansible, and Jenkins. Leverage Docker and Ansible playbook design for continuous deployment and continuous delivery and maintain responsibility for configuration management for infrastructure as code. Manage deployments to Cloud services providers (CSP) environments, including AWS, Azure and Google Cloud.

Technology Skills

You bring in-depth expertise in developing, implementing and architecting security systems specifically for a large Global Enterprise.

·  Must have excellent experience with Microsoft Active Directory
·  Must have excellent experience with Radiant Logic Virtual Directory platform.
·  Experience implementing IAM technologies in one of the cloud platforms (AWS, Azure, Google)
·  Must have experience with managing SSO/Federation integration Tools (PingIdentity, PingAccess, PingOne) with various protocols (SAML, OIDC, WS Fed, etc…)
·  Must have experience with Identity Management systems and methodologies
·  Should have good understanding on key management/digital certificate practices around Microsoft PKI.
·  Should have experience with Privileged Access management tools.
·  Should have an understanding of Role Based Access Control, SOD, regulatory compliance
·  Should have some experience with Java, XML, scripting languages (Perl, javascript, Powershell etc…)

Job Requirements/Qualifications:

· 
Bachelor's degree or equivalent experience

·  8 + years overall experience in relevant technology areas
·  3+ years experience working in a multinational work environment (Healthcare Industry experience a plus) as an Engineer/Technical team member
·  Effective interpersonal skills
·  Well demonstrated delivery focus
·  Strong customer engagement and presentation skills with the ability to communicate across all levels (senior and/or small audiences)
·  Ability to work effectively with team members and virtual teams from different locations and different cultural background
·  Ability to function independently with little supervision
·  Strong problem solving and decision-making skills
·  Fully fluent oral and written communication skills in English. German, Spanish and Chinese (Mandarin) are significant pluses
·  Proven project and time management skills is a plus
·  Moderate Travel required and ability to work across multiple timezones
·  Industry Certifications for the Infrastructure Solution Area desired

Roche is an equal opportunity employer.
Information Technology, Information Technology > IT Infrastructure and End-User Services

·  Who we are

A member of the Roche Group, Genentech has been at the forefront of the biotechnology industry for more than 40 years, using human genetic information to develop novel medicines for serious and life-threatening diseases. Genentech has multiple therapies on the market for cancer & other serious illnesses. Please take this opportunity to learn about Genentech where we believe that our employees are our most important asset & are dedicated to remaining a great place to work.

Roche is an equal opportunity employer and strictly prohibits unlawful discrimination based upon an individual's race, color, religion, gender, sexual orientation, gender identity/expression, national origin/ancestry, age, mental/physical disability, medical condition, marital status, veteran status, or any other characteristic protected by law.