Staff Engineer - Identity and Access Management Zürich, ZH, CH Flexible Location Posted 5 hours ago

ON.com LLC; Zürich; Hybrid; CHF 180.000 - 260.000; Vollzeit

Zusammenfassung

On is seeking a Staff Engineer – Identity and Access Management (IAM) in Zurich to serve as principal technical authority and domain architect for identity services powering On’s global ecosystem, spanning our workforce, partners, digital consumers, and cloud workloads.

This senior IC role leads IAM roadmap, collaborates with Cybersecurity, Platform Engineering, Cloud Infra, Product, Privacy, and Legal, mentors engineers, and champions automation, IaC, and Zero Trust across the organization.

Qualifikationen

• Deep IAM craft & production track record.
• Experience designing, scaling, and operating identity architectures at a global scale.
• Holistic view of software engineering, cloud environments, DevOps pipelines, and API security.

Aufgaben

• Lead large-scale IAM engineering and architecture initiatives end-to-end across On’s global platforms.
• Engage with Cybersecurity, Platform Engineering, Cloud Infrastructure, Product, Privacy, Legal, and Business Operations to align on access problems.
• Foresee technical, organizational, or operational friction in identity lifecycles and balance security with velocity and usability.
• Share knowledge, mentor engineers and security teams, elevating On’s identity security maturity.
• Champion automation, Infrastructure as Code (IaC), and Zero Trust across unconventional paths.

Kenntnisse

IAM architecture

Cloud platforms (GCP/AWS/Azure)

DevOps pipelines

API security

OAuth 2.0 / OpenID Connect

SAML 2.0

SCIM 2.0

WebAuthn/Passkeys

PAM patterns

Jobbeschreibung

## Staff Engineer - Identity and Access ManagementZurichApply NowUse AI to find out how well you match with this jobJob ID: JR26071045Date posted: 07/21/2026Function: TechnologyIn Short As a Staff Engineer – Identity and Access Management (IAM), you will serve as the principal technical authority and domain architect for the identity services powering On’s global ecosystem—spanning our workforce, partners, digital consumers, and cloud workloads.This is a senior individual contributor (IC) role designed for an established technical leader who thrives at the intersection of deep engineering craft, cross-functional collaboration, and strategic systems architecture. You will own the technical roadmap for corporate and consumer identity, lead complex enterprise-wide security initiatives, make critical architectural trade-offs, and cultivate technical excellence across engineering and product teams without direct people management responsibilities.**Your Mission*** Lead Complex Strategic Initiatives: Drive large-scale, high-impact IAM engineering and architecture initiatives end-to-end across On’s global platforms, ensuring identity solutions deliver robust security, operational resilience, and seamless user experience.* Harness Perspectives & Align Stakeholders: Actively engage with diverse viewpoints across Cybersecurity, Platform Engineering, Cloud Infrastructure, Product, Privacy, Legal, and Business Operations to forge technical alignment on complex, multi-faceted access problems.* Anticipate Pitfalls & Navigate Trade-Offs: Foresee where technical, organizational, or operational friction may arise in identity lifecycles and architectures, confidently balancing security controls against velocity, developer experience, and system usability.* Proactively Share Knowledge & Coach: Serve as a force multiplier across the Oniverse by sharing learnings, establishing best practices, mentoring engineers and security teams, and elevating On’s collective identity security maturity through open collaboration.* Drive Continuous Improvement: Challenge conventions and the status quo to eliminate technical debt and operational toil—championing modern automation, Infrastructure as Code (IaC), and Zero Trust paradigms even through unconventional or innovative paths.Your Story* Deep IAM Craft & Production Track Record: You have extensive, hands-on experience designing, scaling, and operating mission-critical workforce and consumer identity architectures at a global scale.* Cross-Discipline Systems Thinking: You possess a holistic perspective on software engineering, cloud environments (GCP, AWS, Azure), modern DevOps pipelines, and API security, understanding how identity serves as the foundation across all layers.* Standards & Protocols Mastery: You demonstrate deep expertise in modern authentication, authorization, and federation mechanisms (OAuth 2.0, OpenID Connect, SAML 2.0, SCIM 2.0, WebAuthn/Passkeys, and PAM patterns).* Courage & Straightforward Candor: You are not afraid to tackle difficult technical challenges, challenge legacy assumptions, or surface risks early. You view technical disagreements as productive opportunities to reach better architectural outcomes.* Relational Intelligence & Synthesis: You build strong, authentic relationships with technical and non-technical partners across various domains, translating intricate identity risks into practical, business-relevant solutions.* Grit & Composure Under Pressure: You remain calm, focused, and solution-oriented during high-pressure incidents or complex enterprise migrations, consistently seeing commitments through to delivery.Our TeamYou will join the Cybersecurity function within On’s Technology organization. We protect the human and non-human identities behind our workplace, cloud platforms, digital supply chain, and athlete/consumer experiences.We view Identity as a product we engineer and run—not a set of disconnected gates we police. Our culture thrives on trust, autonomous ownership, clear communication, and high-impact innovation. This position is a senior individual contributor role that provides technical leadership and mentorship across the team without administrative line-management responsibilities.What we offerOn is a place that is centered around growth and progress. We offer an environment designed to give people the tools to develop holistically – to stay active, to learn, explore and innovate. Our distinctive approach combines a supportive, team-oriented atmosphere, with access to personal self-care for both physical and mental well-being, so each person is led by purpose.On is an Equal Opportunity Employer. We are committed to creating a work environment that is fair and inclusive, where all decisions related to recruitment, advancement, and retention are free of discrimination.