Senior Enterprise Identity Architect — Zero-Trust Leader

Roche; Madrid; On-site; EUR 140,000 - 190,000; Full time

Job summary

Roche is seeking a Principal Enterprise Identity Engineer to define a multi-year identity strategy, aligning IGA with zero-trust across a global ecosystem. You will architect scalable identity frameworks, mentor senior engineers, and drive cross-functional transformations protecting critical assets while enabling seamless operations.

You will work at the highest technical level, bridging executive strategy with hands-on implementation across SailPoint, cloud platforms, and complex APIs.

Qualifications

• Minimum 12 years hands-on engineering in Cybersecurity/Identity Management
• 5+ years leading identity strategies in regulated multinational environments
• Expert SailPoint design, deployment, and performance tuning

Responsibilities

• Lead multi-year roadmap and end-to-end identity strategy
• Establish and enforce enterprise architecture patterns and standards
• Architect SailPoint-based EIM solutions at massive scale
• Translate security paradigms into board-level strategies
• Pioneer decentralized identity and ML-driven access analytics
• Mentor senior engineers and lead critical incident analysis

Skills

SailPoint

Java

Python

Multi-cloud

CI/CD

DevOps

RBAC SoD

Executive communication

Education

Bachelor’s or Master’s in CS/IT

Tools

SailPoint IdentityNow

SailPoint IdentityIQ

AWS

Azure

GCP

CI/CD pipelines

Job description

Roche is seeking a Principal Enterprise Identity Engineer to define a multi-year identity strategy, aligning IGA with zero-trust across a global ecosystem. You will architect scalable identity frameworks, mentor senior engineers, and drive cross-functional transformations protecting critical assets while enabling seamless operations.

You will work at the highest technical level, bridging executive strategy with hands-on implementation across SailPoint, cloud platforms, and complex APIs.