IAM Architect

Project overview

Job Title: IAM Architect

Reference: 26-04-6829-001

Responsibilities

Education:

Primary Skills:

Important Skills:

Required Qualities:

• Design the evolutions of IAM systems that are part of the IAM program's project portfolio.
• Model the corresponding systems and solutions, meeting functional and non-functional requirements, particularly regarding availability, performance, and security.
• Contribute to the development of the client's overall IAM technical strategy.
• Advise third-party projects on the IAM services to integrate to ensure the identification and access management of their users.
• Ensure compliance with IT architecture standards and regulations and carry out corresponding checks.
• Provide operational support to technical teams, particularly by developing guides and checklists or facilitating design workshops.
• University Bachelor's degree in Computer Science, EPF Engineering Diploma, or other equivalent qualification.
• Excellent ability to design information system architectures, urbanize, and model.
• Excellent command of IT security challenges in architectures, risk analysis frameworks, standards, and best practices.
• Good command of architecture patterns related to the IAM domain, technical architectures in general, and particularly web technologies.
• Good command of the Java programming language in a server environment.
• Good knowledge of Unix/Linux and Windows server environments.
• Excellent command of IAM concepts (authentication and access management in RBAC model, directories and digital identities, ABAC and ReBAC concepts).
• Mastery of IAM concepts (authentication and access management in RBAC model, directories and digital identities, ABAC and ReBAC concepts).
• Mastery of identity federation protocols SAML, OAuth2, and OpenID Connect and major IAM protocols (LDAP, Kerberos, RADIUS, SCIM, FIDO2/WebAuthn, OATH).
• Mastery of on-premise enterprise directory concepts and architectures (LDAP and Microsoft AD) and in cloud environments (Microsoft Entra ID).
• Good understanding of Zero Trust access control strategies and their application in web architectures, particularly at the level of web reverse proxies (F5 BIG-IP or Apache), applications, and APIs.
• Mastery of technologies related to the formalization of needs and the modeling of IAM exchange flows in architectures.
• Experience in developing architectures for large volumes of processing and/or usage, with a very high availability rate.
• Knowledge of security standards and frameworks (ISO 27001 / 27002, NIST, CIS, OWASP, etc.).
• Knowledge of secrets management (HSM, KMS, Vault, and certificates / PKI).
• Knowledge of application security (AppSec and DevSecOps).
• Knowledge of the legal and regulatory framework for data protection (e.g., Convention 108, LIPAD, LPD, Privacy Shield, GDPR, Safe Harbor).
• Good knowledge of enterprise architecture processes and best practices.
• Knowledge of architecture modeling using the ArchiMate method, including the use of the iServer solution.
• High integrity and personal ethics, ability to maintain absolute confidentiality and discretion regarding processed information.
• High level of autonomy, exemplary rigor, and pragmatism.
• Ability to make decisions and enforce them.
• Listening skills, ability to work in a team, and stress resistance.
• Ability to question oneself and to learn.
• Flexibility, adaptability, understanding of business needs and constraints.
• Impeccable ethics.
• Ability to manage conflict situations.
• Good writing and communication skills.

Project details

Geneva

Desired Start Date: January 2027

100%

Compensation: from 171,000 CHF / year

Job Description and Context:

We are looking for an IAM architect for a client, a public administration in Geneva, to strengthen its technology architecture team.

Within the team responsible for the implementation, maintenance, and evolution of technological architectures, the selected candidate will design the evolutions of the IAM systems within the IAM program and handle all required design aspects, whether technical, procedural, or organizational. Long-term mission (up to 5 years).

• Start: flexible
• Location: Geneva, Geneva, CH
• Languages: French