IAM Engineer

Job Title: IAM Technical Engineer

Location: Lausanne, Switzerland (Preferred) or Olten, Switzerland

Work Model: Hybrid – 3 days onsite / 2 days remote

Contract Duration: Until 31 December 2026 with further Extensions

Overview:

We are looking for an experienced IAM Technical Expert – Application Access & Provisioning to join a major Identity & Access Management (IAM) transformation program. In this role, you will help implement and optimize application integrations, automated provisioning, and centralized identity lifecycle management while supporting modern authentication and access control initiatives.

Key Responsibilities:

• Build and maintain an inventory of applications integrated with the IAM platform.
• Identify applications that are not connected to IAM processes and develop onboarding and remediation plans.
• Assess application access management maturity and identify gaps in provisioning, deprovisioning, authentication, and authorization.
• Evaluate authentication methods and recommend improvements for SSO, Federation, MFA, and Microsoft Entra ID integration.
• Support application discovery activities to identify unmanaged or locally managed applications.
• Integrate enterprise and legacy applications with the IAM platform and Microsoft Entra ID.
• Collaborate with IAM teams, application owners, and infrastructure teams to deliver secure and automated identity solutions.
• Produce technical documentation and provide troubleshooting support for IAM integrations.

Required Skills & Experience:

• Bachelor's or Master's degree in Computer Science, Information Technology, Information Security, or a related field.
• 5+ years of hands-on experience implementing and supporting Identity & Access Management (IAM) solutions.
• Strong experience integrating enterprise applications with IAM platforms.
• Proven experience implementing automated provisioning and deprovisioning processes.
• Strong expertise in Microsoft Entra ID (Azure AD).
• Hands-on experience with:
• Single Sign-On (SSO)
• Federation
• SAML
• OAuth 2.0
• OpenID Connect (OIDC)
• Multi-Factor Authentication (MFA)
• Good understanding of:
• RBAC (Role-Based Access Control)
• REST APIs
• SCIM
• LDAP
• Active Directory
• Identity provisioning standards
• Experience integrating legacy applications into enterprise IAM environments.
• Strong troubleshooting, analytical, and technical documentation skills.
• Experience with PowerShell or other automation/scripting tools is a plus.

Preferred Background:

We would love to hear from professionals with experience in:

• Microsoft Entra ID (Azure AD)
• Identity lifecycle management (Joiner, Mover, Leaver)
• Application onboarding and IAM integrations
• Enterprise authentication and authorization
• Identity provisioning and access automation
• Enterprise IAM platforms such as SailPoint, Saviynt, One Identity, Okta, Ping Identity, or ForgeRock

If you have a strong technical background in IAM, enjoy integrating enterprise applications, and are passionate about secure identity and access management, we'd love to hear from you.