Senior IAM Security and Resilience Engineer

Project overview

Job Title: Senior IAM Security and Resilience Engineer

Reference: 26-04-7040-002

Responsibilities

Education:

Primary Skills:

Important Skills:

Required Qualities:

working at

null

• Support IAM engineers and architects in designing and implementing solutions that meet security risks and requirements.
• Coordinate, qualify, and prioritize, based on risks and feasibility, vulnerabilities, obsolescences, and security gaps in the IAM IS.
• Monitor remediation plans, produce progress reports, and regularly inform management of security improvements.
• Maintain the resilience requirements and plan for IAM services and coordinate associated tests with technical teams and the business continuity program.
• Ensure that requirements for logging, monitoring, detection, and response capabilities are implemented, tested, and operational.
• Coordinate with security teams on the implementation and continuous improvement of the ITDR approach across the entire IAM infrastructure.
• Periodically organize the review of administrative and technical rights and access to apply the principle of least privilege.
• Contribute to mastering the lifecycle, security, and authentication mechanisms of machine identities: technical accounts, service accounts, application identities, workloads, secrets, keys, and certificates.
• Maintain technological and security watch, lead the assessment of risk criticality, and the definition of remediation plans.
• Support service managers in identifying and monitoring cybersecurity risks and participate in security reviews of significant changes to the IAM infrastructure.
• University Master's degree in Computer Science, EPF/HES engineering diploma, federal diploma, or equivalent training.
• IAM Infrastructure Security: Proven experience in securing identity and access management infrastructures, particularly directories, authentication, authorization, and federation services.
• Human and Machine Identities: Good command of security issues related to user accounts, technical accounts, service accounts, application identities, and workloads, as well as their authentication mechanisms.
• Vulnerability and Risk Management: Ability to identify, qualify, and prioritize vulnerabilities, obsolescences, and security gaps based on risks and the feasibility of remediation measures.
• Resilience and Continuity: Good understanding of the principles of resilience, continuity, and recovery of digital services, as well as the organization of associated tests.
• Incident Detection and Response: Good understanding of the logging, monitoring, detection, and response needs for identity-related security incidents.
• Knowledge of ITDR principles and mechanisms for identifying, detecting, and addressing threats affecting human and machine identities.
• Good command of PAM access, principles of least privilege and separation of responsibilities, as well as periodic review of administrative and technical access.
• Knowledge of authentication mechanisms for applications, services, and servers, as well as the management of certificates, secrets, keys, and other associated authentication elements.
• Technical Identity Lifecycle: Good understanding of the issues related to the creation, assignment, rotation, use, supervision, and deletion of service accounts, application identities, and other non-human identities.
• IAM Security and Standards: Good understanding of Zero Trust concepts, SAML, OAuth, OpenID Connect, MFA, and best practices for identity security.
• Hybrid Environments: Good knowledge of infrastructures combining Active Directory, LDAP, Entra ID, and cloud services.
• Audit and Security: Experience in configuration analysis, security auditing, and monitoring remediation plans.
• Compliance and Regulations: Knowledge of regulatory requirements and security frameworks such as LPD, LIPAD, ISO 27001, NIST, or CIS.
• Excellent ability to solve complex problems.
• Strong ability to interact with expert engineers, security teams, service managers, and management.
• Mastery of communication within an organization based on remote work.
• Autonomy, initiative, anticipation, and adaptability.
• Solution-oriented, with the necessary rigor and critical thinking.
• Demonstrated team spirit and stress resistance.
• Ability to integrate into multidisciplinary teams composed of experts working remotely.
• Ability to coordinate cross-functional activities without substituting for the responsibilities of experts and service managers.
• Excellent written and oral communication.

Project details

Geneva

Desired Start Date: As soon as possible

80 to 100%

Compensation: from 149,000 CHF / year (100% basis)

Job Description and Context:

We are looking for a Senior IAM Security and Resilience Engineer for a client, a public administration in Geneva, to strengthen its identity and access management service, responsible for several hundred thousand accounts (citizens, employees, partners, and students) and their access to numerous digital services.

The selected candidate will enhance the security and resilience of the IAM infrastructure: directory security, authentication, authorization, and federation, human and machine identities, vulnerability management, continuity, and identity-related threat detection (ITDR). The position is open for an 80 to 100% rate, within a team of experts working remotely. The mission is subject to client accreditation procedures. Long-term mission (up to 5 years).

• Start: flexible
• Location: Geneva, Geneva, CH
• Languages: French