Identity Architect: Open-Source IdP & Zero Trust

International Committee of the Red Cross - ICRC; Genf; On-site; CHF 150,000 - 210,000; Full time

Job summary

The International Committee of the Red Cross (ICRC) in Geneva seeks an Identity Specialist (Open-Source Technologies) to design, build and operate modern on-prem identity solutions. You will lead the migration from WSO2 to Keycloak, implement Zero Trust, MFA and identity federation, and work with Active Directory and Entra ID where required.

You will collaborate closely with the IAM Product team, security, and the Open-Source Programme Office, contributing to governance and documentation for a

Qualifications

• University degree in Computer Science or Information Technology, or equivalent experience.
• 10+ years of relevant work experience, including 5 years hands-on in identity environments with open-source tech.
• Proven hands-on experience with Keycloak and WSO2 Identity Server.
• Experience with Active Directory and Entra ID is an asset.
• SAFe / Agile experience is an asset.

Responsibilities

• Design, deploy and maintain identity solutions based on open-source technologies with MFA, conditional access and passwordless authentication.
• Integrate with Windows AD and Entra ID as needed.
• Manage CIAM solution lifecycle and migrate from WSO2 Identity Server to Keycloak.
• Lead Keycloak architecture as the on-prem IdP and new CIAM, ensuring smooth migration.
• Ensure integration with identity governance and JML workflows.
• Implement monitoring, logging and alerting per corporate standards.

Skills

Identity federation

Zero Trust

MFA

OpenID Connect

Education

Bachelor's degree in CS or IT

Tools

Keycloak

WSO2 Identity Server

Active Directory

Entra ID

Terraform

Job description

The International Committee of the Red Cross (ICRC) in Geneva seeks an Identity Specialist (Open-Source Technologies) to design, build and operate modern on-prem identity solutions. You will lead the migration from WSO2 to Keycloak, implement Zero Trust, MFA and identity federation, and work with Active Directory and Entra ID where required.

You will collaborate closely with the IAM Product team, security, and the Open-Source Programme Office, contributing to governance and documentation for a