Senior System Engineer/Architect (Focus OneIdentity and IAM Overall Architecture) 80-100%

immediately or by arrangement You are the technical heart of our IAM solution and take on the role of Lead Engineer and Architect for our central identity governance platform. Together with the Product Owner and Team Coach, you shape the technical future of our IAM landscape and ensure a sustainable, scalable, and secure architecture. You look beyond the horizon (Privileged Access Management, Partner IAM, Customer IAM) and ensure that all components merge into a secure and efficient overall system, while consistently focusing on standardization. Your tasks • Lead for OneIdentity architecture and engineering: You are responsible for the technical architecture within the OneIdentity suite (Designer, Manager, Web Designer, and Object Browser). You implement complex business logics and approval workflows, but always prefer standard functionalities over complex customizing • Overall IAM understanding and coordination: You understand the identity flows across all systems. You advise Product Owners and specialist departments on the technical implications of requirements and ensure that architecture principles and IAM policies are taken into account in the solutions • Architecture functions (Tech-Lead): You coach the engineers in technical questions, promote knowledge transfer within the team, conduct architecture and code reviews (QA), and evaluate solution variants for their sustainability. You are also responsible for architecture documentation and plan the removal of technical legacy issues • Technical contact person for application integrations: You act as the technical counterpart to the IAM onboarding team and advise them on connecting complex applications to the IAM system. You define the technical integration paths and ensure that new systems are connected according to the architecture specifications • Roadmap and further development: You define the roadmap for the further development of the OneIdentity platform towards a modern cloud identity architecture (Entra ID). You support the Product Owner in the technical evaluation and architecture planning of the further development of the OneIdentity platform and derive technical requirements and architecture decisions from it • Support for AD and Entra ID: You have sound knowledge of the hybrid Microsoft environment and support the team in the AD/Entra ID area in engineering and advise on the technical connection to the IAM • 3rd level support and DevOps: You solve deep-seated problems (e.g., SQL errors, synchronization conflicts) and optimize processes sustainably to continuously increase the efficiency of IAM operations Your profile • Education: Completed degree in computer science, training as a Fachinformatiker, or a comparable technical qualification • IAM expertise: Several years of professional experience in the administration and engineering of complex IAM systems and hybrid architectures (AD, Entra ID) • OneIdentity Deep Dive: Sound knowledge of OneIdentity Manager (or a comparable IGA/IAM tool). You understand the data model and can technically map business logic • Overall technical understanding: Sound knowledge of the Microsoft environment (Active Directory, Entra ID, and M365) as well as very good SQL and PowerShell skills. You understand technical connections across system boundaries, support Microsoft specialists at eye level, and are able to read, analyze, and adapt scripts and business logics in the OneIdentity environment (e.g., VB.NET/C\#) as needed • Methodical leadership: Experience in the methodical leadership of (external) partners or engineers in complex IAM implementations without direct line responsibility • Plus point Infrastructure as Code (IaC): Ideally, you bring experience with IaC concepts (e.g., Git pipelines) to automate and professionalize the provisioning and configuration of the IAM system landscape • Architecture mindset: Sound knowledge of role and rights management as well as access governance. You can justify technological decisions professionally and represent them to various stakeholders • Languages: Very good German and English skills Our offer With us, you work in an agile SAFe environment and take on a central technical role in our IAM team. Together with the Product Owner and Team Coach, you shape the future of our identity platform. You receive a lot of freedom for technical decisions, contribute your own ideas, and sustainably shape the architecture of a platform that is strategically important for the USZ. Flexible working hours and the possibility to work from home support you in balancing work and private life well. Further information If you have questions about the position, Christian Memmer, Team Leader Productivity & M365, is at your disposal. Tel. +41 44 255 67 89 Mail christian.memmer@usz.ch Dossiers from recruitment agencies cannot be considered for this position. Thank you for your understanding.