IAM Architect: Zero Trust & PAM Expert

Startupvalleys; Genf; Hybrid; CHF 140,000 - 210,000; Full time

Job summary

Sonar is seeking an experienced Identity & Access Management (IAM) Engineer to design, build, and operate the identity platforms that secure access to our applications, infrastructure, and data. You will own the technical direction of our IAM ecosystem, including authentication, authorization, lifecycle management, and privileged access.

You will design, implement, and maintain enterprise IAM solutions (SSO, MFA, federation), automate provisioning across SaaS, cloud, and on-prem systems, and

Qualifications

• 6 to 15 years of experience in IAM or security engineering.
• Hands-on with major IAM platforms such as Okta, Microsoft Entra ID (Azure AD), Ping Identity, ForgeRock, SailPoint, or CyberArk.
• Strong knowledge of identity protocols: SAML 2.0, OAuth 2.0, OpenID Connect, SCIM, LDAP, Kerberos.
• Experience with Active Directory and directory services architecture.
• Scripting/programming in Python, PowerShell, Go, Java, or JavaScript.
• Solid understanding of cloud IAM models (AWS IAM, Azure RBAC, GCP IAM).
• Experience with MFA, passwordless, and conditional/risk-based access.
• Familiarity with Zero Trust, least privilege, defense-in-depth.

Responsibilities

• Design, implement, and maintain enterprise IAM solutions including SSO, MFA, federation, and directories.
• Architect and manage identity lifecycle processes across SaaS, cloud, and on-prem systems.
• Implement and operate Privileged Access Management (PAM) with vaulting and just-in-time access.
• Lead Identity Governance and Administration (IGA) initiatives with RBAC and access reviews.
• Integrate applications with identity platform using SAML, OIDC, OAuth 2.0, SCIM, LDAP.
• Develop automation and tooling to reduce manual identity operations.
• Secure cloud identity across AWS, Azure, and GCP with IAM policies and service accounts.
• Define authentication/authorization standards and monitoring for threats.
• Support detection/response for account compromise and credential abuse.

Skills

IAM expertise

Security engineering

Analytical skills

Communication skills

Problem solving

Leadership

Tools

Okta

Microsoft Entra ID (Azure AD)

Ping Identity

ForgeRock

SailPoint

CyberArk

Python

PowerShell

Job description

Sonar is seeking an experienced Identity & Access Management (IAM) Engineer to design, build, and operate the identity platforms that secure access to our applications, infrastructure, and data. You will own the technical direction of our IAM ecosystem, including authentication, authorization, lifecycle management, and privileged access.

You will design, implement, and maintain enterprise IAM solutions (SSO, MFA, federation), automate provisioning across SaaS, cloud, and on-prem systems, and