Overview
SOFTSWISS continues to expand the team and is looking for an Access Management Engineer. We need a true, experienced, and accomplished professional who shares our culture and values.
Access Management Team
The Access Management team, consisting of three experts, plays a key role at the intersection of IT operations and security. Their primary responsibilities include processing access requests and continuously improving the organisation’s access management practices. This involves developing and maintaining access procedures, integrating new systems into a centralised framework, and implementing automation to strengthen our overall Identity and Access Management (IAM) strategy.
Team’s current focus: Redesigning and rebuilding access management processes to make them automated, manageable, transparent, and user-friendly. Implementing and optimising role-based access control (RBAC).
Purpose of the Role
We’re looking for an engineer to lead our IAM practice and shape the future of how we manage access, making it secure, automated, and seamless for everyone. You will be the go-to expert for all things IAM, with the autonomy to design, build, and optimise processes that are critical to our security and business operations
Key Responsibilities
- Design and implement IAM solutions: integrate cloud and on-premises applications with IAM systems
- Automate access management processes: design and configure RBAC/ABAC, SCIM and other automation mechanisms
- Handle complex ACP tasks and incident management: resolve high-level technical issues related to IAM, PAM, and SSO
- System Architecture and Integration: design integrations using SCIM, SAML, OAuth, and APIs
- Streamline CI/CD processes: help automate deployment and infrastructure maintenance
- Support policy development: provide technical input into the creation of ACP policies and standards
- Documentation creation: Ensure high-quality technical documentation is maintained
Requirements
- 3+ years of experience as a cybersecurity engineer or IT professional (DevOps, DevSecOps, SE etc.) with a focus on security roles
- In-depth knowledge of IAM/IDM solutions (Keycloak, Okta, etc), PAM solutions, and related interfaces (SCIM, SAML, REST API, JWT, MFA, OpenID, OAuth, LDAP, etc.)
- Demonstrated automation skills with at least one of the following scripting languages: PowerShell, Bash, Python, or Go
- Proficient in administering both Linux and Windows operating systems
Nice to have
- Experience with the design and implementation of role-based access control (RBAC) models and performing access rights audits
Learn more about our hiring process here – what to expect, how to prepare, and what makes SOFTSWISS different.