IAM Security Architect: Identity and Access Lead

AZQORE SA; Vaud; On-site; CHF 150,000 - 210,000; Full time

Benefits offered by this job

Healthcare contribution (CHF 300/month

27 days annual leave

Pension plan (LPP)

Extended paternity leave

Flex office policy

Job summary

AZQORE SA is seeking a highly skilled IAM Security IT Architect to define and govern secure application architectures with a focus on digital identity, authentication, federation, and authorization. You will translate business and regulatory requirements into scalable patterns and guide delivery from design through operation.

The role involves shaping target architectures, establishing standards, and leading SSO decisions across cloud, hybrid, and on-prem environments.

Qualifications

• Extensive experience in IT IAM architecture and application security.
• Experience designing enterprise authentication and federation solutions.
• Ability to influence multidisciplinary teams and communicate risks to technical and non-technical stakeholders.
• Certifications in authentication, identity, or federation are a plus.

Responsibilities

• Define target architectures, principles, standards, and reusable patterns for secure apps and APIs.
• Design authentication, federation, authorization, and session-management across cloud, hybrid, and on-premises environments.
• Assess SSO federation landscape and plan migration roadmap with target-state architecture.
• Lead architecture decisions for SSO using SAML 2.0, OpenID Connect, WS-Federation, and OAuth 2.0.
• Define, document, and promote enterprise authentication standards and guidelines.
• Participate in troubleshooting with production/operations on authentication, tokens, and federation issues.
• Support IAM on-call rotations and incident resolution across PAM, PKI, and HSM/KMS services.
• Maintain architecture docs, decision records, and roadmaps.

Skills

SAML 2.0

OpenID Connect

OAuth 2.0

WS-Federation

MFA/Passkey

FIDO2

Zero-trust

Cloud security

Container security

CI/CD security

Identity governance

Education

Bachelor’s or Master’s degree in CS / cybersecurity

Equivalent professional experience

Tools

WSO2 Identity Server

AD FS

Microsoft Entra ID

Keycloak

Okta

Ping Identity

Forgerock

CyberArk PAM

PKI

HSM/KMS

Job description

AZQORE SA is seeking a highly skilled IAM Security IT Architect to define and govern secure application architectures with a focus on digital identity, authentication, federation, and authorization. You will translate business and regulatory requirements into scalable patterns and guide delivery from design through operation.

The role involves shaping target architectures, establishing standards, and leading SSO decisions across cloud, hybrid, and on-prem environments.