Universitätsspital Zürich
Zürich
Senior System Engineer/Architect (Focus OneIdentity and Overall IAM Architecture) 80-100%
- 11 August 2026
- 80 – 100%
- Permanent position
- German (Fluent), English (Fluent)
- 8091 Zürich
About the job
You are the technical heart of our IAM solution and take on the role of Lead Engineer and Architect for our central Identity Governance platform. Together with the Product Owner and Team Coach, you shape the technical future of our IAM landscape and ensure a sustainable, scalable, and secure architecture. You look beyond the immediate scope (Privileged Access Management, Partner IAM, Customer IAM) and ensure that all components merge into a secure and efficient overall system, consistently focusing on standardisation.
The University Hospital Zurich is one of the largest hospitals in Switzerland. Our over 8,600 employees and around 700 trainees dedicate themselves daily to the well-being of our patients.
The University Hospital Zurich is one of the largest hospitals in Switzerland. Our over 8,600 employees and around 700 trainees dedicate themselves daily to the well-being of our patients.
Senior System Engineer/Architect (Focus OneIdentity and Overall IAM Architecture) 80-100%
immediate start or by arrangement
Your Tasks
- Lead for the OneIdentity Architecture and Engineering: You are responsible for the technical architecture within the OneIdentity suite (Designer, Manager, Web Designer and Object Browser). You implement complex business logics and approval workflows, but always prefer standard functionalities over complex customising
- Overall IAM Understanding and Coordination: You understand identity flows across all systems. You advise Product Owners and departments on the technical impacts of requirements and ensure that architectural principles and IAM policies are considered in the solutions
- Architecture Functions (Tech Lead): You coach engineers on technical issues, promote knowledge transfer within the team, conduct architecture and code reviews (QA), and evaluate solution variants for their sustainability. You are also responsible for the architecture documentation and plan the reduction of technical legacy
- Technical Contact for Application Integrations: You act as the technical counterpart to the IAM Onboarding team and advise them on connecting complex applications to the IAM system. You define the technical integration paths and ensure that new systems are connected according to architectural specifications
- Roadmap and Further Development: You define the roadmap for the further development of the OneIdentity platform towards a modern cloud identity architecture (Entra ID). You support the Product Owner in the technical evaluation and architectural planning of the OneIdentity platform’s further development and derive technical requirements and architectural decisions from this
- Support for AD and Entra ID: You have profound knowledge of the hybrid Microsoft environment and support the team in the AD/Entra ID area in engineering and advise on the technical connection to IAM
- 3rd Level Support and DevOps: You resolve deep-seated issues (e.g. SQL errors, synchronization conflicts) and sustainably optimise processes to continuously increase the efficiency of IAM operations
Your Profile
- Education: Completed studies in computer science, training as an IT specialist, or a comparable technical qualification
- IAM Expertise: Several years of professional experience in the administration and engineering of complex IAM systems and hybrid architectures (AD, Entra ID)
- OneIdentity Deep Dive: Profound knowledge of OneIdentity Manager (or a comparable IGA/IAM tool). You understand the data model and can technically map business logic
- Technical Overall Understanding: Profound knowledge in the Microsoft environment (Active Directory, Entra ID and M365) as well as very good SQL and PowerShell skills. You understand technical interrelations across system boundaries, support Microsoft specialists as equals, and are able to read, analyse, and adapt scripts and business logics in the OneIdentity environment (e.g. VB.NET/C#) if necessary
- Methodical Leadership: Experience in methodical leadership of (external) partners or engineers in complex IAM implementations without direct line responsibility
- Plus Point Infrastructure as Code (IaC): Ideally, you bring experience with IaC concepts (e.g. Git pipelines) to automate and professionalise the provisioning and configuration of the IAM system landscape
- Architecture Mindset: Profound knowledge in role and rights management as well as access governance. You can justify technological decisions professionally and represent them to various stakeholders
- Languages: Very good German and English skills
Our Benefits
With us, you work in an agile SAFe environment and take on a central technical role in our IAM team. Together with the Product Owner and Team Coach, you shape the future of our identity platform. You receive plenty of freedom for technical decisions, contribute your own ideas, and sustainably influence the architecture of a platform strategically important for the USZ. Flexible working hours and the possibility to work from home support you in balancing work and private life well.
University Hospital Zurich
8091 Zurich
8091 Zurich
