Senior IAM Security & Resilience Engineer

Location: Geneva · Contract: Permanent · Assignment: long term · Rate: 80 to 100% · Start: as soon as possible

For one of our clients based in Geneva, we are looking for an experienced Senior IAM Security & Resilience Engineer.

Context

The team responsible for identity and access management (IAM) administers several hundred thousand accounts (employees, partners and external users) as well as their access to a wide catalogue of digital services.

To strengthen the security and resilience of this IAM infrastructure, the team is seeking an experienced cybersecurity engineer profile, with particular expertise in the security issues of identity infrastructures, authentication, authorisation and directories.

The position is subject to a security clearance procedure.

Your missions

• Support IAM engineers and architects in the design and implementation of solutions addressing security risks and requirements

• Coordinate, assess and prioritise, according to risks and feasibility, vulnerabilities, obsolescences and security gaps in the IAM information system

• Monitor remediation plans, produce progress reports and regularly inform management of the security status

• Maintain the requirements and resilience plan for IAM services, and coordinate associated tests with technical teams and the business continuity programme

• Ensure that requirements for logging, monitoring, detection and response capabilities are implemented, tested and operational

• Coordinate with security teams the implementation and continuous improvement of the ITDR approach across the entire IAM infrastructure

• Periodically organise the review of administrative and technical rights and access to apply the principle of least privilege

• Contribute to the lifecycle management, security and authentication mechanisms of machine identities: technical accounts, service accounts, application identities, workloads, secrets, keys and certificates

• Conduct technological and security watch, and lead the evaluation of risk criticality as well as the definition of remediation plans

• Support service managers in identifying and monitoring cybersecurity risks, and participate in security reviews of major IAM infrastructure changes

Education

• University Master’s degree in computer science, EPF/HES engineering diploma, federal diploma or equivalent training

Essential skills

• IAM infrastructure security: proven experience securing identity and access management infrastructures, including directories, authentication, authorisation and federation services

• Human and machine identities: strong knowledge of security issues related to user accounts, technical accounts, service accounts, application identities and workloads, as well as their authentication mechanisms

• Vulnerability and risk management: ability to identify, assess and prioritise vulnerabilities, obsolescences and security gaps based on risks and feasibility of remediation measures

• Resilience and continuity: good understanding of resilience, continuity and digital service recovery principles, as well as the organisation of associated tests

• Incident detection and response: good understanding of logging, monitoring, detection and response needs for security incidents related to identities

Desirable skills

• Knowledge of ITDR principles and mechanisms to identify, detect and address threats affecting human and machine identities

• Good mastery of PAM access, least privilege principles, separation of duties and periodic review of administrative and technical access

• Knowledge of authentication mechanisms for applications, services and servers, as well as management of certificates, secrets, keys and other associated authentication elements

• Technical identity lifecycle: good understanding of creation, assignment, rotation, use, supervision and deletion issues for service accounts, application identities and other non-human identities

• IAM security and standards: good understanding of Zero Trust concepts, SAML, OAuth, OpenID Connect, MFA and best practices for securing identities

• Hybrid environments: good knowledge of infrastructures combining Active Directory, LDAP, Entra ID and Cloud services

• Audit and security: experience in configuration analysis, security auditing and monitoring remediation plans

• Compliance and regulation: knowledge of regulatory requirements and security frameworks such as LPD, ISO 27001, NIST or CIS

• Excellent ability to solve complex problems

• Strong ability to interact with expert engineers, security teams, service managers and management

• Proficient communication skills within a remote work-based organisation

Personal qualities

• Autonomy, initiative, anticipation and adaptability

• Solution-oriented, with the necessary rigour and critical thinking

• Demonstrated teamwork skills and stress resilience

• Ability to integrate multidisciplinary expert teams working in a network, notably remotely

• Ability to coordinate cross-functional activities without replacing the responsibilities of experts and service managers

• Excellent written and oral communication