Principal Identity Architect: Zero-Trust & EIM Leader

Roche; South San Francisco (CA); On-site; USD 115,000 - 264,000; Full time

Benefits offered by this job

Discretionary annual bonus

Benefits package

On-site in South San Francisco

Job summary

Roche Genentech is seeking a Principal Enterprise Identity Engineer to shape a multi-year identity strategy, drive zero-trust initiatives, and lead a global EIM/IGA program. You will bridge executive strategy with hands-on engineering across SailPoint, cloud, and microservices.

Based in South San Francisco onsite, you will mentor senior engineers, define architecture patterns, and translate complex security requirements into actionable plans for a distributed, highly scalable identity platform.

Qualifications

• Minimum 8–10 years of hands-on engineering in Cybersecurity and Identity Management.
• 5+ years guiding identity strategies in regulated multinational environments.
• Deep SailPoint expertise across IdentityNow/IdentityIQ.
• Expert-level Java and Python proficiency.
• Experience integrating across multi-cloud environments (AWS/Azure/GCP) and CI/CD pipelines.
• Strong executive communication and global leadership.

Responsibilities

• Lead the multi-year roadmap and end-to-end technical strategy for enterprise identity, aligning IGA architectures with global security policies and zero-trust frameworks.
• Establish and enforce enterprise-wide architecture patterns, engineering standards, and reusable frameworks across identity, cloud, and infrastructure domains.
• Architect and oversee the deployment of next-generation, SailPoint-based EIM solutions that operate flawlessly at a massive, distributed scale.
• Translate complex security paradigms and regulatory requirements into actionable, board-level technical strategies.
• Pioneer the adoption of emerging identity technologies, including decentralized identity, ML-driven access analytics, and complex microservice/API integrations.
• Act as the technical cornerstone for the identity organization, mentoring senior engineers and leading Tier 4 escalation and root-cause analysis.

Skills

SailPoint

Java

Python

Multi-cloud

CI/CD

DevOps

Executive presence

Mentoring

Architecture leadership

Education

Bachelor's degree in Computer Science / Cyber Security / Information Technology

Master's degree preferred

Tools

SailPoint IdentityNow/IdentityIQ

AWS

Azure

GCP

CI/CD tooling

Job description

Roche Genentech is seeking a Principal Enterprise Identity Engineer to shape a multi-year identity strategy, drive zero-trust initiatives, and lead a global EIM/IGA program. You will bridge executive strategy with hands-on engineering across SailPoint, cloud, and microservices.

Based in South San Francisco onsite, you will mentor senior engineers, define architecture patterns, and translate complex security requirements into actionable plans for a distributed, highly scalable identity platform.