Global Enterprise IAM Architect (SailPoint Expert)

F. Hoffmann-La Roche AG; Madrid; On-site; EUR 90,000 - 120,000; Full time

Job summary

Roche seeks a Senior EIM Engineer to architect, build, and deploy SailPoint-based IAM solutions across global environments. You will own end-to-end delivery, align with enterprise security standards, and drive innovation through PoCs and APIs.

Ideal candidates bring 8+ years in Identity Management, strong Java, cloud integration experience, and a proven ability to collaborate with cross-functional teams worldwide.

Qualifications

• Minimum 8 years of hands-on experience in Identity Management within large-scale environments.
• 3+ years experience in a multinational work environment; Healthcare industry experience is a plus.
• Strong customer engagement and presentation skills with the ability to communicate across all levels.
• Deep expertise in SailPoint design, custom development, troubleshooting, and architecture.
• Experience integrating with Active Directory and cloud environments (AWS, Azure, GCP).
• Familiarity with CI/CD, DevOps, and modern architecture (APIs, microservices, cloud).
• Education in Computer Science, Cyber Security, IT, or related field; CISSP a plus.

Responsibilities

• Lead end-to-end technical design of EIM solutions aligned with enterprise standards and security policies.
• Define and standardize architecture patterns, best practices, and reusable frameworks.
• Conduct design reviews and provide governance for scalable, high-quality implementations.
• Translate security and business requirements into actionable technical solutions.
• Architect, build, test, and deploy SailPoint-based IAM solutions from the ground up.
• Deliver resilient identity solutions across complex, distributed environments.
• Collaborate with cross-functional teams to ensure smooth implementation and production rollout.
• Own delivery lifecycle end-to-end, including planning, estimation, timelines, and risk management.
• Act as Tier 3 escalation point, leading root cause analysis and long-term fixes.
• Drive innovation through PoCs and adoption of modern EIM integrations (APIs, cloud integrations).

Skills

Identity management

Java programming

RBAC & SoD

CI/CD & DevOps

APIs & integrations

Microservices

Education

Bachelor's or advanced degree in Computer Science / IT / related field

Tools

SailPoint

Active Directory

Cloud platforms (AWS/Azure/GCP)

Job description

Roche seeks a Senior EIM Engineer to architect, build, and deploy SailPoint-based IAM solutions across global environments. You will own end-to-end delivery, align with enterprise security standards, and drive innovation through PoCs and APIs.

Ideal candidates bring 8+ years in Identity Management, strong Java, cloud integration experience, and a proven ability to collaborate with cross-functional teams worldwide.