Identity Specialist (Open-Source Technologies)

ICRC - International Committee of the Red Cross; Genf; On-site; CHF 180,000 - 240,000; Full time

Job summary

ICRC is seeking an Identity Specialist (Open-Source Technologies) to design, build and operate modern on-premises identity solutions. You will expand open-source platforms like Keycloak and WSO2 Identity Server, implement Zero Trust, and collaborate with IAM product teams to align identity strategies with humanitarian missions.

The role requires 10+ years in identity environments with strong open-source experience, AD/Entra ID knowledge, and SAFe-style delivery.

Qualifications

• University degree in Computer Science or Information Technology or equivalent professional experience.
• 10+ years of relevant work experience, including 5 years hands-on engineering and administration of identity environments with a focus on open-source technologies.
• Proven hands-on experience with Keycloak and WSO2 Identity Server.
• Experience with Active Directory and Entra ID is an asset.
• Experience in Agile product delivery environments (SAFe) using collaborative tools is an asset.
• In-depth understanding of SAML, OAuth 2.0, OpenID Connect (OIDC) and JWT.
• Ability to adapt and maintain code in at least one language (ideally Java); version control and contributing to open-source projects.

Responsibilities

• Design, deploy and maintain identity solutions based on open-source technologies, including MFA, adaptive access, and passwordless authentication, within a Zero Trust framework.
• Integrate identity solutions with Windows AD and Entra ID as required.
• Manage lifecycle of WSO2 Identity Server and evolve to Keycloak, including migration planning.
• Lead architecture of Keycloak as the on-prem CIAM provider and migration from WSO2 Identity Server.
• Ensure integration with identity governance to streamline Joiner-Mover-Leaver workflows and automated provisioning.
• Integrate monitoring, logging and alerting per corporate standards to maintain visibility and security.
• Provide incident and request support with cross-functional teams to maintain service quality.
• Create and maintain technical docs, deployment guides and configuration baselines.
• Foster open-source collaboration with ICRC Open-Source Programme Office and broader community.

Skills

Open-source IAM

Keycloak

WSO2 Identity Server

Active Directory

Entra ID

SAML/OIDC/OAuth

Java

Terraform

Ansible

CI/CD / IaC

Education

University degree in Computer Science or Information Technology

Tools

PowerShell

Terraform

Ansible

Job description

Identity Specialist (Open-Source Technologies)

About the ICRC

Since 1863, the International Committee of the Red Cross (ICRC) has worked to preserve human dignity and relieve suffering caused by war and armed violence.

In collaboration with our Red Cross and Red Crescent partners around the world, we do everything we can to deliver life‑saving aid, reconnect families and locate missing people - helping those who need it most, regardless of who they are and what side of the front line they are on.

We engage with authorities and armed forces on all sides, often confidentially, pressing for access to detainees to improve their living conditions and urging compliance with international humanitarian law to protect non‑combatants, including from digital threats.

Purpose of the Role

As part of the Identity and Access Management (IAM) Product team within the IT organization, the Identity Specialist (Open-Source Technologies) is at the forefront of designing, building and operating modern on‑premises identity solutions. The role is pivotal in expanding the use of open‑source identity platforms, such as Keycloak and WSO2, to provide sovereign and reliable identity services to the ICRC and in implementing Zero Trust principles across our global operations. The Identity Specialist works closely with the rest of the IAM Product team, the identity architect, the security team and other product teams to align identity strategies with the requirements of our humanitarian mission and to ensure secure, seamless access for our distributed workforce.

Main Duties & Responsibilities

• Design, deploy and maintain identity solutions based on open‑source technologies, including conditional and adaptive access controls, multi‑factor authentication (MFA), identity federation and passwordless authentication, to enforce a robust Zero Trust security framework.
• Integrate these solutions with existing organizational technologies such as Windows Active Directory (AD) and Entra ID where required.
• Manage the lifecycle and evolution of the current customer identity and access management (CIAM) solution, WSO2 Identity Server, to ensure business continuity.
• Lead the architecture of Keycloak as the new on‑premises identity provider (IdP), set it up as the new CIAM solution and lead the migration from WSO2 Identity Server to Keycloak.
• Ensure open‑source identity platforms integrate with the ICRC’s identity governance solutions, streamlining Joiner‑Mover‑Leaver (JML) workflows and automated provisioning.
• Integrate monitoring, logging and alerting with corporate standards to maintain visibility over identity events and detect and address threats proactively.
• Provide sustainable and responsive incident and request support, working closely with cross‑functional support teams to maintain service quality and platform reliability.
• Create and maintain technical documentation, deployment guides and configuration baselines to support operational continuity and team alignment.
• Foster an open‑source community for identity management, collaborating actively with the ICRC’s Open‑Source Programme Office and the wider open‑source community.

Education & Professional Background

• University degree in a technical field, such as Computer Science or Information Technology, or equivalent professional experience.
• Minimum 10 years of relevant work experience, including 5 years of hands‑on experience engineering and administering identity environments, with a strong focus on open‑source technologies.
• Proven hands‑on experience with Keycloak and WSO2 Identity Server.
• Experience with Active Directory and Entra ID is an asset.
• Experience in Agile product delivery environments (SAFe) using collaborative management tools is an asset.
• In‑depth understanding of modern identity and federation standards, including SAML, OAuth 2.0, OpenID Connect (OIDC) and JWT.
• Ability to adapt and maintain code in at least one programming language, ideally Java, use version control, submit pull requests and contribute changes upstream to open‑source projects where appropriate.
• Proficiency in automation and scripting with tools such as PowerShell, Terraform, Ansible and CI/CD pipelines, including Infrastructure as Code (IaC), to build custom workflows and automate bulk operations.
• Experience provisioning and managing identity configuration natively with Terraform is an asset.

Additional Information

• Type of Contract: Open‑ended
• Length of Assignment: Long term assignment
• Activity Rate: 100%
• Start date: January 2027

Please note that the finalization of this recruitment is subject to the validation of the 2027 PfR.

The ICRC values diversity and is committed to creating an inclusive working environment. We welcome applications from all qualified candidates.

Our Values

At the ICRC, we value impact, collaboration, respect, and compassion. We seek candidates who demonstrate behaviors based on these shared values. For more information on the ICRC values, please visit this page.

Job Family: Communications / Information Management / Information Technologies

Contract Type: Open-ended contract

Title: Identity Specialist (Open-Source Technologies)