Principal Enterprise Identity Engineer

Roche
Madrid, Spain
4 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience required
5 years minimum
Working hours
Regular working hours

Tech stack

Java (Programming Language) Amazon Web Services Application Frameworks Microsoft Azure Cyber Security Continuous Integration DevOps Identity and Access Management Python (Programming Language) Machine Learning Role-Based Access Control Zero Trust Network Access
+5 more
Google Cloud Multi-Cloud SailPoint Api Management Microservices

Job description

Experteer Overview In this role you lead a global Enterprise Identity Management and Identity Governance program, shaping multi-year strategy and zero-trust adoption.You bridge executive strategy with technical execution, designing scalable identity frameworks and mentoring senior engineers.You’ll drive cross-functional transformations to protect critical assets while enabling global business operations.This is an opportunity to influence security at scale within a mission-driven healthcare company.Compensaciones / Beneficios* Lead multi-year roadmap and end-to-end technical strategy for enterprise identity aligned with IGA, security policies, and zero-trust* Set enterprise-wide architecture patterns and reusable frameworks across identity, cloud, and infrastructure* Architect and oversee SailPoint-based EIM deployments at massive, distributed scale* Translate complex security and regulatory requirements into board-level technical strategies* Pioneer emerging identity technologies (decentralized identity, ML-driven access analytics, complex microservice/API integrations)* Serve as technical cornerstone for identity organization, mentoring senior engineers and leading Tier 4 escalation and root-cause analysisResponsabilidades* 12+ years of hands-on engineering in Cybersecurity and Identity Management, with 5+ years in enterprise architecture or principal level* 5+ years steering identity strategies in highly regulated, multinational environments (Healthcare/Finance preferred)* Expert-level SailPoint (IdentityNow/IdentityIQ) experience across design, customization, and global deployment* Proficiency in Java and Python for connectors, rules, and automated workflows* Experience with multi-cloud integrations (AWS, Azure, GCP), CI/CD, DevOps, and microservices* Deep understanding of RBAC, PBAC, SoD, and advanced access governanceRequisitos principales*

Requirements

  • 12+ years of hands-on engineering in Cybersecurity and Identity Management, with 5+ years in enterprise architecture or principal level
  • 5+ years steering identity strategies in highly regulated, multinational environments (Healthcare/Finance preferred)
  • Expert-level SailPoint (IdentityNow/IdentityIQ) experience across design, customization, and global deployment
  • Proficiency in Java and Python for connectors, rules, and automated workflows
  • Experience with multi-cloud integrations (AWS, Azure, GCP), CI/CD, DevOps, and microservices
  • Deep understanding of RBAC, PBAC, SoD, and advanced access governance

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.buscojobs.com.es

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:34 min

Pivoting careers into specialized platform engineering roles

Xavier Portilla Edo · LIVE

1:22 min

Overcoming developer challenges in multi-cloud environments

Sandeep Pal Sandeep Pal · Coffee With Developers

2:17 min

Mapping the maturity roadmap for scaled devops adoption

Dominik Krichbaum Dominik Krichbaum · WWC Europe 2026

3:22 min

Transitioning from software engineering to security roles

Anna Oliveira · Coffee With Developers

1:20 min

Introduction to multi-cloud development infrastructure

Sandeep Pal Sandeep Pal · Coffee With Developers

3:18 min

Scaling global network engineering through DevOps culture

Stuart Clark · LIVE

Videos

See all

Related articles

See all