Identity & Access Management Engineer Azure IAM Engineer

Roche fosters diversity, equity and inclusion, representing the communities we serve.
When dealing with healthcare on a global scale, diversity is an essential ingredient to success.
We believe that inclusion is key to understanding people's varied healthcare needs.
Together, we embrace individuality and share a passion for exceptional care.
Join Roche, where every voice matters.The PositionIdentity & Access Management Engineer (Azure IAM Engineer)We focus on the long-term, leading investment in research and development, striving to improve lives today and for generations to come.Poland plays the role of Technology Co-creation and Acceleration Hub building capabilities driving digital innovation.
In Roche Informatics we are a diverse team of open and friendly people, enthusiastic about technological novelties and optimal IT solutions.The opportunity:
To lead and contribute to the end-to-end design of infrastructure solutions and the creation and maintenance of related component standards.To produce and maintain sufficient documentation for the designs, design patterns, and component standards so they can be operated in an automated manner and/or by other teams and team members.To interact with senior internal and external partners on significant technical matters as they relate to prioritize objectives.To strengthen the overall community by building bridges and collaborating with other engineers.To contribute to determining success criteria and evaluation of promising solutions/technologies via Proofs of Concept (PoCs) and feasibility studies as they relate to meeting Roche's business needs.To architect (as solution architect), design, build, test, and implement (first-time deployments) integrated, resilient and reliable solutions.To lead small-to-medium sized technical teams for specific objectives in medium-to-large initiatives (projects, lifecycle work, Proofs of Concept, etc.) and to provide the expert guidance required to drive technical developments.Who you are:
Bachelor's degree or equivalent experience.Strong design and implementation knowledge of Microsoft Entra ID.Strong knowledge on Privileged Identity Management and experience.Knowledge in designing and implementing IAM roles and policies following the least-privileged principle.Knowledge in concepts like RBAC and ABAC and how they are implemented in Microsoft Azure.Knowledge and hands-on technical skills on automation toolchain and tools (Gitlab, Terraform, Rundeck, Python, PowerShell).Intermediate knowledge in Single Sign-On protocols:
OAuth, OIDC, SAML.
Being able to interact with Single Sign-On SMEs when integrating new applications.Intermediate knowledge in consuming APIs (i.e.
Graph) using different programming languages:
Python, PowerShell.Used to Agile teams, methodologies and tools:
Service Now Agile, Jira.Strong customer engagement and presentation skills with the ability to communicate across all levels (senior and/or small audiences).Strong problem solving and decision-making skills.Fully fluent oral and written communication skills in English.What you get:
Salary range 18,500 - 22,000 PLN gross based on the employment contract (Umowa o pracę).Annual bonus payment based on your performance.Dedicated training budget (training, certifications, conferences, diversified career paths etc.).Recharge Fridays (2 Fridays off per quarter available).Take time Program (up to 3 months of leave to use for any purpose).Flex Location (possibility to perform our work from different places in the world for a certain period of time).Take Time for Charity (additional paid leave of maximum 2 weeks to engage in the charity action of your choice).Private healthcare (LuxMed packages) and group life insurance (UNUM).Stock share purchase additions.Yearly sales of company laptops and cars and many more.APPLY DIRECTLYIf you feel this offer suits a friend of yours, feel free to share it.Want to know what it's like to be a part of Roche IT first-hand? Check out our blog!***/global/en/we-are-rocheRoche is an Equal Opportunity Employer.
•