Senior IAM Architect – Identity & Access Leader

ON.com LLC; Zürich; Hybrid; CHF 180,000 - 260,000; Full time

Job summary

On is seeking a Staff Engineer – Identity and Access Management (IAM) in Zurich to serve as principal technical authority and domain architect for identity services powering On’s global ecosystem, spanning our workforce, partners, digital consumers, and cloud workloads.

This senior IC role leads IAM roadmap, collaborates with Cybersecurity, Platform Engineering, Cloud Infra, Product, Privacy, and Legal, mentors engineers, and champions automation, IaC, and Zero Trust across the organization.

Qualifications

• Deep IAM craft & production track record.
• Experience designing, scaling, and operating identity architectures at a global scale.
• Holistic view of software engineering, cloud environments, DevOps pipelines, and API security.

Responsibilities

• Lead large-scale IAM engineering and architecture initiatives end-to-end across On’s global platforms.
• Engage with Cybersecurity, Platform Engineering, Cloud Infrastructure, Product, Privacy, Legal, and Business Operations to align on access problems.
• Foresee technical, organizational, or operational friction in identity lifecycles and balance security with velocity and usability.
• Share knowledge, mentor engineers and security teams, elevating On’s identity security maturity.
• Champion automation, Infrastructure as Code (IaC), and Zero Trust across unconventional paths.

Skills

IAM architecture

Cloud platforms (GCP/AWS/Azure)

DevOps pipelines

API security

OAuth 2.0 / OpenID Connect

SAML 2.0

SCIM 2.0

WebAuthn/Passkeys

PAM patterns

Job description

On is seeking a Staff Engineer – Identity and Access Management (IAM) in Zurich to serve as principal technical authority and domain architect for identity services powering On’s global ecosystem, spanning our workforce, partners, digital consumers, and cloud workloads.

This senior IC role leads IAM roadmap, collaborates with Cybersecurity, Platform Engineering, Cloud Infra, Product, Privacy, and Legal, mentors engineers, and champions automation, IaC, and Zero Trust across the organization.