Identity Architect - Open-Source IAM & Zero Trust

ICRC; Genf; On-site; CHF 180,000 - 240,000; Full time

Job summary

ICRC is seeking an Identity Specialist (Open-Source Technologies) to design, build and operate modern on-premises identity solutions. You will expand open-source platforms like Keycloak and WSO2 Identity Server, implement Zero Trust, and collaborate with IAM product teams to align identity strategies with humanitarian missions.

The role requires 10+ years in identity environments with strong open-source experience, AD/Entra ID knowledge, and SAFe-style delivery.

Qualifications

• University degree in Computer Science or Information Technology or equivalent professional experience.
• 10+ years of relevant work experience, including 5 years hands-on engineering and administration of identity environments with a focus on open-source technologies.
• Proven hands-on experience with Keycloak and WSO2 Identity Server.
• Experience with Active Directory and Entra ID is an asset.
• Experience in Agile product delivery environments (SAFe) using collaborative tools is an asset.
• In-depth understanding of SAML, OAuth 2.0, OpenID Connect (OIDC) and JWT.
• Ability to adapt and maintain code in at least one language (ideally Java); version control and contributing to open-source projects.

Responsibilities

• Design, deploy and maintain identity solutions based on open-source technologies, including MFA, adaptive access, and passwordless authentication, within a Zero Trust framework.
• Integrate identity solutions with Windows AD and Entra ID as required.
• Manage lifecycle of WSO2 Identity Server and evolve to Keycloak, including migration planning.
• Lead architecture of Keycloak as the on-prem CIAM provider and migration from WSO2 Identity Server.
• Ensure integration with identity governance to streamline Joiner-Mover-Leaver workflows and automated provisioning.
• Integrate monitoring, logging and alerting per corporate standards to maintain visibility and security.
• Provide incident and request support with cross-functional teams to maintain service quality.
• Create and maintain technical docs, deployment guides and configuration baselines.
• Foster open-source collaboration with ICRC Open-Source Programme Office and broader community.

Skills

Open-source IAM

Keycloak

WSO2 Identity Server

Active Directory

Entra ID

SAML/OIDC/OAuth

Java

Terraform

Ansible

CI/CD / IaC

Education

University degree in Computer Science or Information Technology

Tools

PowerShell

Terraform

Ansible

Job description

ICRC is seeking an Identity Specialist (Open-Source Technologies) to design, build and operate modern on-premises identity solutions. You will expand open-source platforms like Keycloak and WSO2 Identity Server, implement Zero Trust, and collaborate with IAM product teams to align identity strategies with humanitarian missions.

The role requires 10+ years in identity environments with strong open-source experience, AD/Entra ID knowledge, and SAFe-style delivery.