Web Access Management Engineer (Authentication)

About the role

Roche is looking for a Web Access Management Engineer specialized in authentication to join its Identity & Access Management product team. You will design, build, and maintain secure authentication experiences for both on‑premise and SaaS platforms, ensuring a seamless user experience while protecting against evolving cyber threats.

Key responsibilities

• Design, test, and deploy reusable authentication and authorization components using SAML, OAuth, and OpenID Connect (OIDC).
• Implement and manage secure multi‑factor authentication (MFA) and explore password‑less solutions.
• Develop token‑based authentication (JWT), session management, and secure RESTful API communication.
• Collaborate with backend developers to define robust API security measures, including token validation and authorization.
• Apply ITIL principles for production support, incident management, and vulnerability assessments.
• Stay current with emerging authentication technologies and security best practices.

Required profile

• Hands‑on experience with enterprise IAM solutions and integration with identity providers.
• Familiarity with ITIL processes for troubleshooting and change management.
• Proactive mindset for continuous improvement and technical refinement.

Required skills

• SAML, OAuth, OpenID Connect (OIDC)
• Single Sign‑On (SSO) implementation
• Multi‑Factor Authentication (MFA) and password‑less authentication
• JSON Web Tokens (JWT) and token validation
• RESTful API security, HTTP/HTTPS
• ITIL incident and change management
• Vulnerability assessment and security standards

What we offer

• Opportunity to work on cutting‑edge authentication technologies within a global healthcare leader.
• Collaborative environment with product managers, security engineers, and developers.
• Continuous learning and professional development support.