Identity Specialist (Open-Source Technologies)

International Committee of the Red Cross - ICRC; Genf; On-site; CHF 150,000 - 210,000; Full time

Job summary

The International Committee of the Red Cross (ICRC) in Geneva seeks an Identity Specialist (Open-Source Technologies) to design, build and operate modern on-prem identity solutions. You will lead the migration from WSO2 to Keycloak, implement Zero Trust, MFA and identity federation, and work with Active Directory and Entra ID where required.

You will collaborate closely with the IAM Product team, security, and the Open-Source Programme Office, contributing to governance and documentation for a

Qualifications

• University degree in Computer Science or Information Technology, or equivalent experience.
• 10+ years of relevant work experience, including 5 years hands-on in identity environments with open-source tech.
• Proven hands-on experience with Keycloak and WSO2 Identity Server.
• Experience with Active Directory and Entra ID is an asset.
• SAFe / Agile experience is an asset.

Responsibilities

• Design, deploy and maintain identity solutions based on open-source technologies with MFA, conditional access and passwordless authentication.
• Integrate with Windows AD and Entra ID as needed.
• Manage CIAM solution lifecycle and migrate from WSO2 Identity Server to Keycloak.
• Lead Keycloak architecture as the on-prem IdP and new CIAM, ensuring smooth migration.
• Ensure integration with identity governance and JML workflows.
• Implement monitoring, logging and alerting per corporate standards.

Skills

Identity federation

Zero Trust

MFA

OpenID Connect

Education

Bachelor's degree in CS or IT

Tools

Keycloak

WSO2 Identity Server

Active Directory

Entra ID

Terraform

Job description

About The ICRC

Since 1863, the International Committee of the Red Cross (ICRC) has worked to preserve human dignity and relieve suffering caused by war and armed violence.

About The ICRC

Since 1863, the International Committee of the Red Cross (ICRC) has worked to preserve human dignity and relieve suffering caused by war and armed violence.

In collaboration with our Red Cross and Red Crescent partners around the world, we do everything we can to deliver life-saving aid, reconnect families and locate missing people - helping those who need it most, regardless of who they are and what side of the front line they are on.

We engage with authorities and armed forces on all sides, often confidentially, pressing for access to detainees to improve their living conditions and urging compliance with international humanitarian law to protect non-combatants, including from digital threats.

Purpose of the Role

As part of the Identity and Access Management (IAM) Product team within the IT organization, the Identity Specialist (Open-Source Technologies) is at the forefront of designing, building and operating modern on-premises identity solutions. The role is pivotal in expanding the use of open-source identity platforms, such as Keycloak and WSO2, to provide sovereign and reliable identity services to the ICRC and in implementing Zero Trust principles across our global operations. The Identity Specialist works closely with the rest of the IAM Product team, the identity architect, the security team and other product teams to align identity strategies with the requirements of our humanitarian mission and to ensure secure, seamless access for our distributed workforce.

Main Duties & Responsibilities

• Design, deploy and maintain identity solutions based on open-source technologies, including conditional and adaptive access controls, multi-factor authentication (MFA), identity federation and passwordless authentication, to enforce a robust Zero Trust security framework.


• Integrate these solutions with existing organizational technologies such as Windows Active Directory (AD) and Entra ID where required.


• Manage the lifecycle and evolution of the current customer identity and access management (CIAM) solution, WSO2 Identity Server, to ensure business continuity.


• Lead the architecture of Keycloak as the new on-premises identity provider (IdP), set it up as the new CIAM solution and lead the migration from WSO2 Identity Server to Keycloak.


• Ensure open-source identity platforms integrate with the ICRC's identity governance solutions, streamlining Joiner-Mover-Leaver (JML) workflows and automated provisioning.


• Integrate monitoring, logging and alerting with corporate standards to maintain visibility over identity events and detect and address threats proactively.


• Provide sustainable and responsive incident and request support, working closely with cross-functional support teams to maintain service quality and platform reliability.


• Create and maintain technical documentation, deployment guides and configuration baselines to support operational continuity and team alignment.


• Foster an open-source community for identity management, collaborating actively with the ICRC's Open-Source Programme Office and the wider open-source community.

Education & Professional Background

• University degree in a technical field, such as Computer Science or Information Technology, or equivalent professional experience.


• Minimum 10 years of relevant work experience, including 5 years of hands-on experience engineering and administering identity environments, with a strong focus on open-source technologies.


• Proven hands-on experience with Keycloak and WSO2 Identity Server.


• Experience with Active Directory and Entra ID is an asset.


• Experience in Agile product delivery environments (SAFe) using collaborative management tools is an asset.

Skills & Competencies

• In-depth understanding of modern identity and federation standards, including SAML, OAuth 2.0, OpenID Connect (OIDC) and JWT.


• Ability to adapt and maintain code in at least one programming language, ideally Java, use version control, submit pull requests and contribute changes upstream to open-source projects where appropriate.


• Proficiency in automation and scripting with tools such as PowerShell, Terraform, Ansible and CI/CD pipelines, including Infrastructure as Code (IaC), to build custom workflows and automate bulk operations.


• Experience provisioning and managing identity configuration natively with Terraform is an asset.

Additional Information

• Location: Geneva, Switzerland


• Type of Contract: Open-ended


• Length of Assignment: Long term assignment


• Activity Rate: 100%


• Start date: January 2027


• Application deadline: Thursday, 19 November 2026

Please note that the finalization of this recruitment is subject to the validation of the 2027 PfR.

The ICRC values diversity and is committed to creating an inclusive working environment. We welcome applications from all qualified candidates.

Our Values

At the ICRC, we value impact, collaboration, respect, and compassion. We seek candidates who demonstrate behaviors based on these shared values. For more information on the ICRC values, please visit this page.