IAM System Engineer / Identity and Access Engineer

5400 Baden

IT System Technology

• Permanent position

Office

salary range

115,000 - 125,000 CHF

Potential (2-3 years)

up to 5,000 CHF

01

Future employer

An international pharmaceutical/biotech company is seeking an experienced Identity & Access Management (IAM) professional to strengthen its IT security team. The role focuses on the further development and operation of a central IAM platform, emphasizing identity governance, access control ,

and zero-trust architectures. The focus is not on operational authorization management, but rather on the technical design, automation, and continuous improvement of identity and access processes.

Your task

- Further development and operation of an IAM platform and integration of new applications.

- Design and optimization of identity governance processes, role models, and system interfaces.

- Implementation of modern authentication and SSO solutions (e.g., MFA, SAML, OIDC).

- Introduction and optimization of privileged access management and time-limited administrative rights.

- Implementation of zero trust and least privilege principles.

- Securing service accounts and non-human identities.

- Automation of authorization processes and security controls.

- Collaboration with internal and external stakeholders to improve access security.

- Support for audits and compliance requirements (e.g., ISO 27001).

- Participation in the further development of the identity security architecture.

03

Benefits

• Participation in external training courses
• Bistro or cafeteria
• Independent organization of daily business
• At least 5 weeks of vacation
• Modern workplace
• Regular team-building activities and company events
• Structured and guided onboarding

04

Your profile

- Completed studies in information security, computer science, engineering, or a comparable qualification.

- Practical experience with IAM/IGA platforms, ideally One Identity Manager or comparable solutions.

- Experience in developing workflows, role models, and system integrations in the identity governance environment.

- Knowledge of Microsoft Entra ID and Conditional Access is advantageous.

- Experience with Privileged Access Management (PAM) and Privileged Identity Management (PIM).

- Sound understanding of identity security risks such as privilege escalation, outdated authentication methods, and inadequately protected service accounts.

- Knowledge of relevant security standards and frameworks (e.g., ISO 27001, NIST, CIS).

- Experience with hybrid identity environments (Active Directory / Cloud Identity).

- Ability to analyze and continuously improve complex IAM landscapes.

- Excellent communication and collaboration skills with IT, business, and security teams.

- Relevant certifications are a plus (e.g., CISSP, Azure Security, Security+).

- Understanding of identity governance processes and data models.

- Management of Microsoft Entra ID and conditional access policies.

- Knowledge of PAM/PIM concepts.

- Experience with SSO and federation technologies (SAML, OIDC, OAuth2).

- Knowledge of Active Directory and hybrid identity architectures.

- Automation with PowerShell and APIs.

- Understanding of cloud identities (Azure, AWS, SaaS)

05

• Interesting facts