Senior PBAC Operations Engineer – Identity & Access Management

About the role

Roche is seeking a Senior PBAC Operations Engineer to lead the design, implementation and lifecycle management of its Policy Based Access Control (PBAC) infrastructure within the Identity & Access Management (IAM) domain. The role combines deep technical ownership with consulting for global application owners, ensuring secure and scalable authorization across a hybrid, worldwide environment.

Key responsibilities

• Architect, deploy and maintain high‑availability PBAC components (PDP/PEP) and define global standards for policy‑based authorization.
• Drive Policy as Code initiatives by building automated CI/CD pipelines for versioning, testing and deploying authorization logic.
• Consult with application and data owners to integrate systems securely via RESTful APIs, SQL/JDBC and LDAP.
• Lead root‑cause analysis of complex, ambiguous technical problems and implement proactive risk mitigation.
• Collaborate with product managers, developers and senior leadership to design user‑friendly PBAC flows while managing production environments using ITIL principles.
• Coordinate with external vendors and Managed Service Providers, and mentor team members to foster expertise across the organization.

Required profile

• Bachelor’s degree in a technical field or equivalent experience.
• 8–15 years of IT/Security experience, with at least 5 years focused on IAM and PBAC/ABAC in large enterprises.
• Strong systems‑thinking mindset and ability to advise on enterprise‑wide solutions.
• Excellent English communication and interpersonal skills.

Required skills

• Hands‑on expertise with XACML, decentralized policy management, RBAC and ABAC under Zero Trust principles.
• Proficiency in SAML, OAuth, OIDC, SSO and IGA technologies.
• Programming experience in Java and Python.
• Building and operating Git‑based CI/CD pipelines.
• Integration using RESTful APIs, SQL/JDBC and LDAP.
• Operational knowledge of PDP/PEP components and ITIL service management.