IAM Engineer (M/F)

SecuLabs SA; Genf; On-site; CHF 120,000 - 180,000; Full time

Job summary

SecuLabs SA in Geneva seeks an IAM Engineer to join a client project, designing, implementing and governing IAM with strong emphasis on secure identity lifecycle and governance.

You will work with Saviynt, SailPoint, Okta and CyberArk, implementing MFA, SSO and protocols like SAML, OAuth2 and OpenID Connect, while defining RBAC/ABAC and SoD controls. Proficiency in French and English is expected.

Qualifications

• Significant experience in IAM in a corporate environment.
• Experience with IAM tools such as Saviynt, SailPoint, Okta, CyberArk or equivalent.
• Strong written and verbal communication in English and French.
• Formal degree in information security/IAM or related field.

Responsibilities

• Design, implement and administer IAM solutions including identity, authentication and federation.
• Manage identity lifecycle, entitlements, provisioning and deprovisioning.
• Implement MFA, SSO and federation using SAML, OAuth2 and OpenID Connect.
• Deploy PAM solutions and define RBAC/ABAC and SoD models.
• Support IAM governance, reviews, and recertification campaigns.
• Write IAM policies and assist with project integrations and tech watch.

Skills

Adaptability

Rigour

Interpersonal skills

Strong writing skills

Self-reliance

Education

Engineering degree in information security/IAM

Master’s degree in IAM or information security

Bachelor’s degree in related field

Tools

Saviynt

SailPoint

Okta

CyberArk

Microsoft Entra ID

Job description

SecuLabs is looking for an IAM Engineer to work on LSE staff leasing with one of its clients in Geneva, in a varied technical environment where identity, access, security and compliance are central to the role.

As part of the growth of its business, one of our clients is looking for an IAM (Identity and Access Management) Engineer to strengthen its team in Geneva.

You work in a varied technical environment, with the aim of ensuring that identity and access management processes are reliable, secure and compliant. The assignment covers implementation and administration as well as IAM governance and continuous improvement.

• Design, implement and administer IAM solutions covering identity management, authentication and federation.
• Manage the identity lifecycle (joiners, movers, leavers) along with entitlements, provisioning and deprovisioning.
• Implement and administer strong authentication (MFA), SSO and federation solutions using SAML, OAuth2 and OpenID Connect.
• Deploy and manage privileged access management (PAM) solutions.
• Define and implement RBAC and ABAC access control models, as well as segregation of duties (SoD) matrices.
• Take part in access and entitlement review campaigns and in recertification activities.
• Write and update IAM policies, procedures and reference documents.
• Support projects integrating applications with IAM solutions: connectors, directories and reference repositories.
• Provide level 2/3 technical support and assistance to internal teams.
• Keep a technology watch on developments in identity and access management solutions and standards.
• A degree from an engineering school, IT school or university, specialising in information security and/or IAM (Master's, HES Bachelor's or equivalent).
• Significant experience in identity and access management (IAM, IGA or PAM) in a corporate environment.
• Command of one or more market IAM tools such as Saviynt, SailPoint, Okta, Microsoft Entra ID, CyberArk or equivalent.
• Adaptability and curiosity about new problems, methodologies and tools.
• Rigour, self-reliance, good interpersonal skills and strong writing skills.
• Keen to contribute to service excellence for clients and to join a motivated, dynamic and fast-growing team.
• Command of French and English.

IAM, IGA & PAM solutions

• Saviynt
• SailPoint
• Okta
• CyberArk

Standards & access models

The assignment covers authentication, federation and entitlement governance.

• MFA
• SSO
• SAML
• OAuth2
• OpenID Connect
• RBAC
• ABAC
• SoD

Technical certifications are a plus. An IAM vendor certification, CISSP, CISM or equivalent is appreciated for this role.