Senior Identity & Access Architect

ResumeXrays LLC; Genf; On-site; CHF 120,000 - 180,000; Full time

Job summary

Sonar is seeking an experienced Identity & Access Management (IAM) Engineer to design, build, and operate our IAM platforms securing access to applications, infrastructure, and data. You will own the technical direction of our IAM ecosystem, including authentication, authorization, lifecycle, and privileged access.

You will work with security, IT, engineering, and compliance teams to deliver a secure, scalable access experience aligned with Zero Trust principles.

Qualifications

• 6 to 15 years of IAM, security engineering experience.
• Hands-on with at least one major IAM platform (Okta, Azure AD, Ping Identity, etc.).
• Strong knowledge of IAM protocols: SAML 2.0, OAuth 2.0, OpenID Connect, SCIM, LDAP, Kerberos.
• Experience with Active Directory and directory services architecture.
• Proficiency in at least one scripting language (Python, PowerShell, Go, Java, or JavaScript).
• Knowledge of cloud IAM models (AWS IAM, Azure RBAC, GCP IAM).
• Experience with MFA, passwordless, and risk-based access.
• Familiarity with Zero Trust, least privilege, defense-in-depth.

Responsibilities

• Design, build, and operate enterprise IAM solutions (SSO, MFA, federation, directory services).
• Architect identity lifecycle processes (joiner/mover/leaver) across SaaS, cloud, and on-prem systems.
• Implement and operate Privileged Access Management (PAM) including vaulting and just-in-time access.
• Lead Identity Governance and Administration initiatives (RBAC, access reviews, certifications).
• Integrate applications with identity platform using SAML, OIDC, OAuth 2.0, SCIM, LDAP.
• Develop automation and tooling (APIs, scripts, CI/CD pipelines, IaC) for identity ops.

Skills

IAM platforms

Security engineering

Zero Trust

RBAC

MFA

Tools

Okta

Microsoft Entra ID (Azure AD)

Ping Identity

ForgeRock

SailPoint

CyberArk

Job description

Sonar is seeking an experienced Identity & Access Management (IAM) Engineer to design, build, and operate our IAM platforms securing access to applications, infrastructure, and data. You will own the technical direction of our IAM ecosystem, including authentication, authorization, lifecycle, and privileged access.

You will work with security, IT, engineering, and compliance teams to deliver a secure, scalable access experience aligned with Zero Trust principles.