Solution Architect - Identity & Access Management At Roche

Solution Architect - Identity & Access ManagementLocation: Madrid, MD, ES.This full?time on?site position offers great opportunities for career growth.Job ResponsibilitiesStrategy & Roadmap Definition - Provide expert technical knowledge to define the overarching IAM strategy and multi?year technology roadmaps in alignment with the overall Information Security vision.Roadmap Support - Support the Head of IAM and the Leadership Team in transforming complex scientific and business needs into high?value technology solutions.Trend Integration - Proactively monitor market shifts and technology trends, including AI/ML capabilities, to inform product iterations and maintain a competitive advantage.Cross?Functional Technical Leadership - Provide technical consultancy and architectural oversight to the seven IAM areas (Enterprise Identity, Access Management, Customer Identity, Data Access Control, Privileged Access Management, External Identity, and Directory Services).Zero Trust Catalyst - Champion modern principles such as “Never Trust, Always Verify” and “Policy?as?Code,” ensuring these are integrated into CI/CD and DevSecOps workflows.Continuous Platform Evolution - Drive ongoing collaboration with RDT Functions and business stakeholders to ensure the continuous evolution of our IAM platforms, delivering services that meet emerging needs.Technical Excellence & Lifecycle Management - Contribute to the lifecycle management of technological components, from initial ideation to decommissioning.Operational Integrity - Ensure solutions integrate seamlessly with existing systems, deliver high performance, and provide an intuitive user experience.Compliance & Standards - Guarantee that all technical architectures comply with GxP, CSV, and global data privacy regulations such as GDPR.Mentorship - Coach and provide technical guidance to specialists and engineers across the IAM organization.QualificationsYou have a technical visionary mindset with an “Enterprise Mindset,” 10+ years of experience supporting Enterprise IAM and IT Security systems in a major global organization, and a Bachelor’s or Advanced degree in Computer Science, Cyber Security, or a related Engineering field.Experience in the pharmaceutical, biotechnology, or regulated healthcare industry is a significant asset.Professional certifications such as CISSP, CISM, or CISA are desirable.Technical MasteryDeep knowledge in at least three of our core technology pillars or similar platform is required: Identity Governance & Administration (SailPoint IdentityIQ or IdentityNow / Identity Security Cloud), Access Management/Directory Services (Entra ID, Ping Identity, Active Directory, OIDC/SAML), Privileged Access Management/Secret Management (CyberArk or HashiCorp Vault), Data Access Control (Policy?Based Access Control), Customer IAM (SAP CDC/Gigya).Skills & CompetenciesAdvanced Architecture - Understanding of modern software architecture, including microservices, APIs, and cloud platforms (AWS, Azure, GCP).DevOps & Automation - Experience with CI/CD principles and automation tools such as Ansible and Jenkins.Influencing - Exceptional communication and negotiation skills to manage expectations of senior executives and technical engineers alike.LanguagesExcellent verbal and written English is a must.Roche ist ein Arbeitgeber, der die Chancengleichheit fördert.#J-*****-Ljbffr

Zero Trust Catalyst - Champion modern principles such as “Never Trust, Always Verify” and “Policy?as?Code,” ensuring these are integrated into CI/CD and DevSecOps workflows.Continuous Platform Evolution - Drive ongoing collaboration with RDT Functions and business stakeholders to ensure the continuous evolution of our IAM platforms, delivering services that meet emerging needs.Technical Excellence & Lifecycle Management - Contribute to the lifecycle management of technological components, from initial ideation to decommissioning.Operational Integrity - Ensure solutions integrate seamlessly with existing systems, deliver high performance, and provide an intuitive user experience.Compliance & Standards - Guarantee that all technical architectures comply with GxP, CSV, and global data privacy regulations such as GDPR.Mentorship - Coach and provide technical guidance to specialists and engineers across the IAM organization.QualificationsYou have a technical visionary mindset with an “Enterprise Mindset,” 10+ years of experience supporting Enterprise IAM and IT Security systems in a major global organization, and a Bachelor’s or Advanced degree in Computer Science, Cyber Security, or a related Engineering field.Experience in the pharmaceutical, biotechnology, or regulated healthcare industry is a significant asset. Professional certifications such as CISSP, CISM, or CISA are desirable.Technical MasteryDeep knowledge in at least three of our core technology pillars or similar platform is required: Identity Governance & Administration (SailPoint IdentityIQ or IdentityNow / Identity Security Cloud), Access Management/Directory Services (Entra ID, Ping Identity, Active Directory, OIDC/SAML), Privileged Access Management/Secret Management (CyberArk or HashiCorp Vault), Data Access Control (Policy?Based Access Control), Customer IAM (SAP CDC/Gigya). Skills & CompetenciesAdvanced Architecture - Understanding of modern software architecture, including microservices, APIs, and cloud platforms (AWS, Azure, GCP). DevOps & Automation - Experience with CI/CD principles and automation tools such as Ansible and Jenkins.Influencing - Exceptional communication and negotiation skills to manage expectations of senior executives and technical engineers alike.LanguagesExcellent verbal and written English is a must.Roche ist ein Arbeitgeber, der die Chancengleichheit fördert.