IAM Engineer - Zero Trust & Privileged Access

Sonar; Genf; On-site; CHF 140,000 - 190,000; Full time

Job summary

Sonar is seeking an experienced Identity & Access Management (IAM) Engineer to design, build, and operate the identity platforms that secure access to our applications, infrastructure, and data. You will own the technical direction of our IAM ecosystem, including authentication, authorization, lifecycle management, and privileged access.

You will collaborate with security, IT, engineering, and compliance teams to deliver a secure, scalable access experience aligned with Zero Trust principles

Qualifications

• 6 to 15 years of experience in IAM, security engineering, or related field.
• Hands-on experience with major IAM platforms such as Okta, Microsoft Entra ID (Azure AD), Ping Identity, ForgeRock, SailPoint, or CyberArk.
• Strong knowledge of identity protocols and standards: SAML 2.0, OAuth 2.0, OpenID Connect, SCIM, LDAP, and Kerberos.
• Experience with Active Directory and directory services architecture.
• Proficiency in at least one scripting or programming language (Python, PowerShell, Go, Java, or JavaScript).
• Solid understanding of cloud IAM models (AWS IAM, Azure RBAC, GCP IAM).
• Experience with MFA, passwordless, and conditional or risk‑based access.
• Familiarity with Zero Trust, least privilege, and defense‑in‑depth principles.
• Strong analytical, problem‑solving, and communication skills.

Responsibilities

• Design, implement, and maintain enterprise IAM solutions, including SSO, MFA, federation, and directory services.
• Architect and manage identity lifecycle processes (joiner/mover/leaver), automating provisioning and deprovisioning across SaaS, cloud, and on-prem systems.
• Implement and operate Privileged Access Management (PAM), including vaulting, session management, and just-in-time access.
• Lead Identity Governance and Administration (IGA) initiatives such as access reviews, certifications, role-based access control (RBAC), and segregation-of-duties controls.
• Integrate applications with the identity platform using SAML, OIDC, OAuth 2.0, SCIM, and LDAP.
• Develop automation and tooling (APIs, scripts, CI/CD pipelines, Infrastructure as Code) to reduce manual identity operations.
• Secure cloud identity and access across AWS, Azure, and/or GCP, including IAM policies, workload identity, and service accounts.
• Define and enforce authentication and authorization standards, policies, and best practices.
• Monitor identity-related threats and support detection and response for account compromise, credential abuse, and privilege escalation.

Skills

IAM

Security engineering

Cloud IAM

Zero Trust

MFA

RBAC

Education

Bachelor's degree in Computer Science

Tools

Okta

Microsoft Entra ID (Azure AD)

Ping Identity

ForgeRock

SailPoint

CyberArk

Job description

Sonar is seeking an experienced Identity & Access Management (IAM) Engineer to design, build, and operate the identity platforms that secure access to our applications, infrastructure, and data. You will own the technical direction of our IAM ecosystem, including authentication, authorization, lifecycle management, and privileged access.

You will collaborate with security, IT, engineering, and compliance teams to deliver a secure, scalable access experience aligned with Zero Trust principles