> Markdown version of [/jobs/ext/1466911-solution-architect-identity-access-management-at-roche](https://www.wearedevelopers.com/jobs/ext/1466911-solution-architect-identity-access-management-at-roche). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Solution Architect - Identity & Access Management At Roche

- **Company:** Roche
- **Location:** Madrid, Spain
- **Contract:** Permanent contract
- **Skills:** Active Directory, Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Microsoft Azure, Catalyst (Software), Cloud Computing, Cyber Security, Continuous Integration, Data Security, DevOps, Identity and Access Management, Machine Learning, OpenID, Software Architecture, Ansible, Zero Trust Network Access, Security Assertion Markup Language (SAML), SAP (Applications), Google Cloud, Cyberark, Information Technology, Hashicorp, SailPoint, Devsecops, GXP, Microservices
- **Published:** July 28, 2026
- **Apply:** https://www.buscojobs.com.es/solution-architect-identity-access-management-at-roche-en-madrid-ID-364760976

## About the Role

Zero Trust Catalyst - Champion modern principles such as "Never Trust, Always Verify" and "Policy?as?Code," ensuring these are integrated into CI/CD and DevSecOps workflows.Continuous Platform Evolution - Drive ongoing collaboration with RDT Functions and business stakeholders to ensure the continuous evolution of our IAM platforms, delivering services that meet emerging needs.Technical Excellence & Lifecycle Management - Contribute to the lifecycle management of technological components, from initial ideation to decommissioning.Operational Integrity - Ensure solutions integrate seamlessly with existing systems, deliver high performance, and provide an intuitive user experience.Compliance & Standards - Guarantee that all technical architectures comply with GxP, CSV, and global data privacy regulations such as GDPR.Mentorship - Coach and provide technical guidance to specialists and engineers across the IAM organization.QualificationsYou have a technical visionary mindset with an
"Enterprise Mindset," 10+ years of experience supporting Enterprise IAM and IT Security systems in a major global organization, and a Bachelor's or Advanced degree in Computer Science, Cyber Security, or a related Engineering field.Experience in the pharmaceutical, biotechnology, or regulated healthcare industry is a significant asset.
Professional certifications such as CISSP, CISM, or CISA are desirable.Technical MasteryDeep knowledge in at least three of our core technology pillars or similar platform is required: Identity Governance & Administration (SailPoint IdentityIQ or IdentityNow / Identity Security Cloud), Access Management/Directory Services (Entra ID, Ping Identity, Active Directory, OIDC/SAML), Privileged Access Management/Secret Management (CyberArk or HashiCorp Vault), Data Access Control (Policy?Based Access Control), Customer IAM (SAP CDC/Gigya).
Skills & CompetenciesAdvanced Architecture - Understanding of modern software architecture, including microservices, APIs, and cloud platforms (AWS, Azure, GCP).
DevOps & Automation - Experience with CI/CD principles and automation tools such as Ansible and Jenkins.Influencing - Exceptional communication and negotiation skills to manage expectations of senior executives and technical engineers alike.LanguagesExcellent verbal and written English is a must.Roche ist ein Arbeitgeber, der die Chancengleichheit fördert.

## Description

Solution Architect - Identity & Access ManagementLocation: Madrid, MD, ES.This full?time on?site position offers great opportunities for career growth.Job ResponsibilitiesStrategy & Roadmap Definition - Provide expert technical knowledge to define the overarching IAM strategy and multi?year technology roadmaps in alignment with the overall Information Security vision.Roadmap Support - Support the Head of IAM and the Leadership Team in transforming complex scientific and business needs into high?value technology solutions.Trend Integration - Proactively monitor market shifts and technology trends, including AI/ML capabilities, to inform product iterations and maintain a competitive advantage.Cross?Functional Technical Leadership - Provide technical consultancy and architectural oversight to the seven IAM areas (Enterprise Identity, Access Management, Customer Identity, Data Access Control, Privileged Access Management, External Identity, and Directory Services).Zero Trust Catalyst - Champion modern principles such as "Never Trust, Always Verify" and "Policy?as?Code," ensuring these are integrated into CI/CD and DevSecOps workflows.Continuous Platform Evolution - Drive ongoing collaboration with RDT Functions and business stakeholders to ensure the continuous evolution of our IAM platforms, delivering services that meet emerging needs.Technical Excellence & Lifecycle Management - Contribute to the lifecycle management of technological components, from initial ideation to decommissioning.Operational Integrity - Ensure solutions integrate seamlessly with existing systems, deliver high performance, and provide an intuitive user experience.Compliance & Standards - Guarantee that all technical architectures comply with GxP, CSV, and global data privacy regulations such as GDPR.Mentorship - Coach and provide technical guidance to specialists and engineers across the IAM organization.QualificationsYou have a technical visionary mindset with an "Enterprise Mindset," 10+ years of experience supporting Enterprise IAM and IT Security systems in a major global organization, and a Bachelor's or Advanced degree in Computer Science, Cyber Security, or a related Engineering field.Experience in the pharmaceutical, biotechnology, or regulated healthcare industry is a significant asset.Professional certifications such as CISSP, CISM, or CISA are desirable.Technical MasteryDeep knowledge in at least three of our core technology pillars or similar platform is required: Identity Governance & Administration (SailPoint IdentityIQ or IdentityNow / Identity Security Cloud), Access Management/Directory Services (Entra ID, Ping Identity, Active Directory, OIDC/SAML), Privileged Access Management/Secret Management (CyberArk or HashiCorp Vault), Data Access Control (Policy?Based Access Control), Customer IAM (SAP CDC/Gigya).Skills & CompetenciesAdvanced Architecture - Understanding of modern software architecture, including microservices, APIs, and cloud platforms (AWS, Azure, GCP).DevOps & Automation - Experience with CI/CD principles and automation tools such as Ansible and Jenkins.Influencing - Exceptional communication and negotiation skills to manage expectations of senior executives and technical engineers alike.LanguagesExcellent verbal and written English is a must.Roche ist ein Arbeitgeber, der die Chancengleichheit fördert.#J-*****-Ljbffr


## Related Videos

- [Blueprints for Success: Steering a Global Data & AI Architecture](https://www.wearedevelopers.com/videos/1577-blueprints-for-success-steering-a-global-data-ai-architecture)
- [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform)
- [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect)
- [Next Level Enterprise Architecture: Modular, Flexible, Scalable, Multichannel and AI-Ready?](https://www.wearedevelopers.com/videos/1017-next-level-enterprise-architecture-modular-flexible-scalable-multichannel-and-ai-ready)
- [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment)
- [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak)

## Related Articles

- [The Biggest German Tech Companies](https://www.wearedevelopers.com/magazine/424-the-biggest-german-tech-companies)
- [Best Companies to Work For in Berlin: Top 14 Companies in 2023 ](https://www.wearedevelopers.com/magazine/188-best-companies-to-work-for-in-berlin-top-14-companies-in-2023)
- [Best Companies to Work For in Germany: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/33-best-companies-to-work-for-in-germany-top-25-companies-in-2023)
- [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer)
- [Welcome to Switzerland](https://www.wearedevelopers.com/magazine/4-welcome-to-switzerland)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)