Senior System Engineer/Architect (Focus OneIdentity and IAM Overall Architecture) 80-100%

You are the technical heart of our IAM solution and take on the role of Lead Engineer and Architect for our central identity governance platform. Together with the Product Owner and Team Coach, you shape the technical future of our IAM landscape and ensure a sustainable, scalable, and secure architecture. You look beyond the immediate horizon (Privileged Access Management, Partner IAM, Customer IAM) and ensure that all components merge into a secure and efficient overall system, consistently focusing on standardization. Your tasks

Lead for OneIdentity architecture and engineering: You are responsible for the technical architecture within the OneIdentity suite (Designer, Manager, Web Designer, and Object Browser). You implement complex business logics and approval workflows, but always prefer standard functionalities over complex customizing.

Overall IAM understanding and coordination: You understand the identity flows across all systems. You advise Product Owners and business departments on the technical impact of requirements and ensure that architectural principles and IAM policies are taken into account in the solutions.

Architectural functions (Tech-Lead): You coach the engineers on technical questions, promote knowledge transfer within the team, conduct architecture and code reviews (QA), and evaluate solution variants for their sustainability. Additionally, you are responsible for the architecture documentation and plan the reduction of technical legacy debt.

Technical contact person for application integrations: You act as the technical counterpart to the IAM onboarding team and advise them on connecting complex applications to the IAM system. You define the technical integration paths and ensure that new systems are connected according to the architectural specifications.

Roadmap and further development: You define the roadmap for the further development of the OneIdentity platform towards a modern cloud identity architecture (Entra ID). You support the Product Owner in the technical assessment and architectural planning of the further development of the OneIdentity platform and derive technical requirements and architectural decisions from it.

Support for AD and Entra ID: You have sound knowledge of the hybrid Microsoft environment and support the team in the AD/Entra ID area in engineering and advise on the technical connection to the IAM.

3rd level support and DevOps: You solve deep-seated problems (e.g., SQL errors, synchronization conflicts) and optimize processes sustainably to continuously increase the efficiency of IAM operations.

Your profile

Education: Completed degree in computer science, training as a Fachinformatiker, or a comparable technical qualification.

IAM expertise: Several years of professional experience in the administration and engineering of complex IAM systems and hybrid architectures (AD, Entra ID).

OneIdentity Deep Dive: Sound knowledge of the OneIdentity Manager (or a comparable IGA/IAM tool). You understand the data model and can technically map business logic.

Overall technical understanding: Sound knowledge of the Microsoft environment (Active Directory, Entra ID, and M365) as well as very good SQL and PowerShell skills. You understand technical connections across system boundaries, support Microsoft specialists at eye level, and are able to read, analyze, and, if necessary, adapt scripts and business logics in the OneIdentity environment (e.g., VB.NET/C#).

Methodical leadership: Experience in the methodical leadership of (external) partners or engineers in complex IAM implementations without direct line responsibility.

Plus point

Infrastructure as Code (IaC): Ideally, you bring experience with IaC concepts (e.g., Git pipelines) to automate and professionalize the deployment and configuration of the IAM system landscape.

Architecture mindset: Sound knowledge of role and rights management as well as access governance. You can justify technological decisions professionally and represent them to various stakeholders.

Languages: Very good German and English skills.

Our offer

With us, you work in an agile SAFe environment and take on a central technical role in our IAM team. Together with the Product Owner and Team Coach, you shape the future of our identity platform. You receive a lot of freedom for technical decisions, contribute your own ideas, and sustainably shape the architecture of a platform that is strategically important for the USZ. Flexible working hours and the possibility to work from home support you in balancing professional and private life.