IAM System Engineer / Identity and Access Engineer

Today

5400 Baden

IT Systems Engineering

• Permanent position

Office

Salary band

115'000 - 125'000 CHF

Potential (2-3 years)

bis 5'000 CHF

01

Future Employer ##

An internationally active company in the pharma/biotech industry is looking for an experienced specialist in the field of Identity & Access Management (IAM) to strengthen the IT security team.
The role focuses on the further development and operation of a central IAM platform with an emphasis on identity governance, access control, and zero-trust architectures. The focus is not on operational authorization management, but on the technical conception, automation, and continuous improvement of identity and access processes.

02

Your Task ##

• Further development and operation of an IAM platform as well as integration of new applications.
• Conception and optimization of identity governance processes, role models, and system connections.
• Implementation of modern authentication and SSO solutions (e.g., MFA, SAML, OIDC).
• Introduction and optimization of Privileged Access Management as well as time-limited administration rights.
• Implementation of zero-trust and least-privilege principles.
• Securing service accounts and non-human identities.
• Automation of authorization processes and security controls.
• Collaboration with internal and external stakeholders to improve access security.
• Support for audits and compliance requirements (e.g., ISO 27001).
• Participation in the further development of the identity security architecture.

03

Benefits ##

• Participation in external further training
• Bistro or canteen
• Independent organization of daily business
• At least 5 weeks vacation
• Modern workplace
• Regular team-building measures and company events
• Structured and accompanied onboarding

04

Your Profile ##

• Completed studies in the field of information security, computer science, engineering, or comparable qualification.
• Practical experience with IAM/IGA platforms, ideally One Identity Manager or comparable solutions.
• Experience in the development of workflows, role models, and system integrations in the identity governance environment.
• Knowledge of Microsoft Entra ID and Conditional Access is an advantage.
• Experience with Privileged Access Management (PAM) and Privileged Identity Management (PIM).
• Sound understanding of identity security risks such as privilege escalation, outdated authentication methods, and insufficiently protected service accounts.
• Knowledge of relevant security standards and frameworks (e.g., ISO 27001, NIST, CIS).
• Experience with hybrid identity environments (Active Directory / Cloud Identity).
• Ability to analyze and continuously develop complex IAM landscapes.
• Strong communication and collaboration skills with IT, specialist, and security teams.
• Relevant certifications are a plus (e.g., CISSP, Azure Security, Security+).
• Understanding of identity governance processes and data models.
• Administration of Microsoft Entra ID and Conditional Access Policies.
• Knowledge of PAM/PIM concepts.
• Experience with SSO and federation technologies (SAML, OIDC, OAuth2).
• Knowledge of Active Directory and hybrid identity architectures.
• Automation with PowerShell and APIs.
• Understanding of cloud identities (Azure, AWS, SaaS)

05

Interesting Facts ##

• Dynamic and growing work environment with diverse internal development opportunities.
• Flexible working hours with home office possibilities as well as the option for additional vacation days through reduction of the working percentage.
• Individual development through internal and external training offers.
• Attractive pension benefits with above-average employer contribution to pension fund contributions.
• Access to an employee benefit platform with discounts at external partners.
• Fresh, healthy, and varied catering in the employee restaurant.
• Diverse free sports offers at the location.