> Markdown version of [/jobs/ext/1989102-principal-enterprise-identity-engineer](https://www.wearedevelopers.com/jobs/ext/1989102-principal-enterprise-identity-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Principal Enterprise Identity Engineer

- **Company:** Roche
- **Location:** Madrid, Spain
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), Amazon Web Services, Application Frameworks, Microsoft Azure, Cyber Security, Continuous Integration, DevOps, Identity and Access Management, Python (Programming Language), Machine Learning, Role-Based Access Control, Zero Trust Network Access, Google Cloud, Multi-Cloud, SailPoint, Api Management, Microservices
- **Published:** August 8, 2026
- **Apply:** https://www.buscojobs.com.es/principal-enterprise-identity-engineer-en-madrid-ID-365938394

## About the Role

* 12+ years of hands-on engineering in Cybersecurity and Identity Management, with 5+ years in enterprise architecture or principal level
 * 5+ years steering identity strategies in highly regulated, multinational environments (Healthcare/Finance preferred)
 * Expert-level SailPoint (IdentityNow/IdentityIQ) experience across design, customization, and global deployment
 * Proficiency in Java and Python for connectors, rules, and automated workflows
 * Experience with multi-cloud integrations (AWS, Azure, GCP), CI/CD, DevOps, and microservices
 * Deep understanding of RBAC, PBAC, SoD, and advanced access governance

## Description

Experteer Overview In this role you lead a global Enterprise Identity Management and Identity Governance program, shaping multi-year strategy and zero-trust adoption.You bridge executive strategy with technical execution, designing scalable identity frameworks and mentoring senior engineers.You'll drive cross-functional transformations to protect critical assets while enabling global business operations.This is an opportunity to influence security at scale within a mission-driven healthcare company.Compensaciones / Beneficios* Lead multi-year roadmap and end-to-end technical strategy for enterprise identity aligned with IGA, security policies, and zero-trust* Set enterprise-wide architecture patterns and reusable frameworks across identity, cloud, and infrastructure* Architect and oversee SailPoint-based EIM deployments at massive, distributed scale* Translate complex security and regulatory requirements into board-level technical strategies* Pioneer emerging identity technologies (decentralized identity, ML-driven access analytics, complex microservice/API integrations)* Serve as technical cornerstone for identity organization, mentoring senior engineers and leading Tier 4 escalation and root-cause analysisResponsabilidades* 12+ years of hands-on engineering in Cybersecurity and Identity Management, with 5+ years in enterprise architecture or principal level* 5+ years steering identity strategies in highly regulated, multinational environments (Healthcare/Finance preferred)* Expert-level SailPoint (IdentityNow/IdentityIQ) experience across design, customization, and global deployment* Proficiency in Java and Python for connectors, rules, and automated workflows* Experience with multi-cloud integrations (AWS, Azure, GCP), CI/CD, DevOps, and microservices* Deep understanding of RBAC, PBAC, SoD, and advanced access governanceRequisitos principales*


## Related Videos

- [Blueprints for Success: Steering a Global Data & AI Architecture](https://www.wearedevelopers.com/videos/1577-blueprints-for-success-steering-a-global-data-ai-architecture)
- [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform)
- [The Open-source Java SDK for Multi-Cloud Development - Sandeep Pal](https://www.wearedevelopers.com/videos/2113-the-open-source-java-sdk-for-multi-cloud-development-sandeep-pal)
- [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment)
- [Leverage Cloud Computing Benefits with Serverless Multi-Cloud ML ](https://www.wearedevelopers.com/videos/78-leverage-cloud-computing-benefits-with-serverless-multi-cloud-ml)
- [Next Level Enterprise Architecture: Modular, Flexible, Scalable, Multichannel and AI-Ready?](https://www.wearedevelopers.com/videos/1017-next-level-enterprise-architecture-modular-flexible-scalable-multichannel-and-ai-ready)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j)
- [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production)
- [Stephan Gillich - Bringing AI Everywhere](https://www.wearedevelopers.com/magazine/489-stephan-gillich-bringing-ai-everywhere)
- [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)