Web Access Management Engineer - RDT Identity & Access Management

Roche; Madrid; Presencial; EUR 70.000 - 100.000; Jornada completa

Descripción de la vacante

Roche seeks a Cybersecurity senior engineer specializing in Web Access to lead SSO and MFA implementations across global, hybrid environments including on‑prem and cloud components. You will collaborate with product managers, security engineers, and developers to ensure secure, user‑friendly authentication flows and robust security controls.

With 7+ years in a major global org and a degree in CS/Engineering, you’ll mentor colleagues, respond to incidents, and stay ahead of evolving

Formación

• 7+ years of experience in a major global organization (regulated industry preferred).
• Strong background in identity and access management and security protocols.
• Experience with cross-functional stakeholder management and security incidents.

Responsabilidades

• Own authentication infrastructure for SSO and MFA across global hybrid environments.
• Collaborate with product, security, and development teams to design secure auth flows.
• Respond to incidents and implement changes to minimize risk and improve user experience.
• Apply encryption, digital signatures, and secure token exchange practices.

Conocimientos

IAM solutions

SAML OIDC OAuth

MFA methods

Educación

Bachelor’s degree in CS/Engineering or related

Descripción del empleo

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.

The Position

As a Cybersecurity senior engineer in the Web Access space, you would be part of a multicultural and global team focused on Single Sign On (SSO) / Federation and Multifactor authentication, protecting our information and assets from unauthorized access, security risks and cyber attacks:

• To provide customers’ single sign-on experience supporting Federation focus on SAML and OAuth protocols standards
• To avoid unauthorized access supporting advanced MultiFactor authentication
• To own the core infrastructure enabling day to day operation, performance, tactical lifecycle management and continuous improvement

Your Responsibilities

• As part of a global team, own the Authentication infrastructure to enable SSO and MFA across a global, hybrid infrastructure landscape, including on premise servers and containers, as well as SaaS components.
• Act as consultant for the support and development organizations to promptly respond to customer requests, resolve incidents and implement changes, ensuring a high level of customer engagement and satisfaction. This will be accomplished by combining personal ownership with delegation and documentation to entry support tiers
• Leverage your knowledge of encryption, digital signatures, and secure token exchange
• Apply ITIL principles to troubleshoot authentication issues in production environments and participate in change management processes, working with security teams to mitigate authentication vulnerabilities
• Stay updated on cutting-edge authentication technologies, security threats, and industry best practices to continuously improve security systems
• Work closely with product managers, security engineers, and developers to create secure and user-friendly authentication flows that meet business and technical requirements
• Develop, and maintain reliable and scalable authentication and authorization features to ensure the adoption of security best practices across the organization

Stakeholder Management

• Identifies a diverse range of security stakeholders across functional areas and effectively manages relationships to build reliance through deep business and technical understanding, acting as a trusted advisor
• Acts as a strategic influencer, defining and driving stakeholder engagement strategies for complex initiatives, facilitating workshops, resolving conflicts, and proactively shaping stakeholder perspectives to align with project goals

Impact/Strategy

• Demonstrates strong and consistent performance across diverse products, with an impact that typically extends to a specific product, initiative, or cluster
• Translates requirements into strategic implementation plans that align with overall business objectives, and takes a proactive role in shaping team processes, often contributing to Communities of Practice (CoPs)

Complexity

• Manages business analysis activities on more complex projects or across multiple products within a domain
• Capable of handling ambiguous requirements, navigating intricate stakeholder environments, and evaluating solution impacts considering both immediate and longer‑term implications within the domain

Business/Technical ability

• Demonstrates a strong understanding of the business domain, related technologies, and their interdependencies
• Can independently apply tools, principles, concepts, and techniques related to requirements, data, usability, and process analysis, effectively managing interconnections to improve overall efficiency and effectiveness

Education / Experience

• You bring 7+ years of experience working in a major global organization, preferably in a regulated industry
• You have a Bachelor’s Degree in computer science, engineering or related discipline or recognition of prior working experience
• Demonstrated ability to effectively manage relationships with a diverse range of cross‑functional stakeholders on medium to large‑sized engagements, acting as a trusted advisor
• Proven track record of championing accountability by example, such as successfully taking on security incident lead and/or security project owner roles

Technical Skills

• Demonstrable experience working with Identity and Access Management (IAM) solutions such as Okta, Entra ID (Azure AD), Ping Identity, Auth0, or similar
• Proven experience with SAML, OAuth 2.0 and OpenID Connect (OIDC) protocols
• Able to troubleshoot complex authentication and authorization issues in collaboration with application developers and other technical organizations
• Readiness to adapt to new technologies, standards, and evolving security threats
• Experience implementing and integrating various MFA methods (e.g., TOTP, FIDO2/WebAuthn, biometric authentication, YubiKey)
• Strong proficiency in independently applying tools, principles, and concepts related to requirements, data, usability, and process analysis within the security domain
• Advanced analytical and logical reasoning skills to identify security patterns, threats, and discrepancies, driving comprehensive root cause analysis
• Ability to analyze technology fit and propose effective, strategically aligned cybersecurity solutions and controls

Additional Qualifications

• Effectively communicates to interact with various teams (developers, stakeholders, users)
• Proven experience working collaboratively with cross‑functional teams for integration and implementation of global web solutions
• Demonstrated ability to mentor colleagues with less experience and provide guidance on cybersecurity best practices and analysis techniques
• Proactive contribution to organizational development, including identifying process improvements and actively participating in Communities of Practice (CoPs)
• Strong facilitation, communication, and conflict resolution skills to ensure alignment across multiple product squads and complex stakeholder networks

Who we are

A healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life‑changing healthcare solutions that make a global impact.

Let’s build a healthier future, together.

Roche is an Equal Opportunity Employer.