Roche

Principal Enterprise Identity Engineer - RDT Identity & Access Management

Roche
Apply
4 days ago
South San Francisco, CA, USAStaff+
H1B sponsor

Base Salary

$115k - $264k/yr

Responsibilities

  • Lead the multi-year roadmap and end-to-end technical strategy for enterprise identity and align IGA architectures with security policies and zero-trust frameworks.
  • Establish enterprise architecture patterns, engineering standards, and reusable frameworks across identity, cloud, and infrastructure domains.
  • Architect and oversee large-scale SailPoint-based Enterprise Identity Management solutions.
  • Translate security paradigms and regulatory requirements into board-level technical strategies.
  • Drive adoption of decentralized identity, ML-driven access analytics, and complex microservice/API integrations.
  • Mentor senior engineers and lead Tier 4 escalation, root-cause analysis, architecture reviews, and design reviews for complex identity issues.

Requirements

  • Minimum of 8–10 years of hands-on cybersecurity and identity management engineering experience, including at least 5 years at an enterprise architecture or principal level.
  • At least 5 years steering identity strategies in highly regulated, multinational enterprise environments; healthcare or finance experience is preferred.
  • Deep SailPoint expertise, including IdentityNow and IdentityIQ, with experience in enterprise-scale design, custom development, performance tuning, and global deployment.
  • Expert proficiency in Java and Python for complex connectors, custom rules, and automated workflows.
  • Experience architecting integrations across AWS, Azure, and GCP, with familiarity with CI/CD pipelines, DevOps methodologies, and microservices.
  • Ability to troubleshoot identity issues across ISC configuration, APIs, connectors, applications, directories, and downstream provisioning systems.
  • Bachelor’s or advanced degree in Computer Science, Cyber Security, Information Technology, or a related field; a master’s degree is preferred.
  • CISSP, CISM, or CIAM certification is strongly preferred, and advanced AWS, Azure, GCP Architecture, or SailPoint certifications are highly desirable.
  • Ability to communicate complex technical concepts to nontechnical stakeholders and lead distributed global engineering teams.

Benefits

  • Must work onsite in South San Francisco.
  • Relocation benefits are not available for this job posting.
  • The position qualifies for company benefits detailed at the provided benefits link.
Roche

About Roche

10,000+ employees

Roche is a Swiss healthcare company that develops and sells prescription pharmaceuticals and in vitro diagnostic systems for hospitals, laboratories, and clinicians. Its business spans two core divisions—Pharmaceuticals and Diagnostics—with strengths in oncology, immunology, neuroscience, infectious diseases, and diabetes care. Founded in 1896 and headquartered in Basel, Switzerland, Roche also advances personalized healthcare by pairing therapies with companion diagnostics.

Contact me