At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.
The PositionThe IAM Solution Architect is a high-impact technical leadership role accountable for the architectural integrity, long-term technical strategy, and evolution of the global Identity & Access Management ecosystem. Reporting directly to the Head of Identity & Access Management, you serve as a strategic technical advisor, bridging the gap between broad security goals and the tangible roadmap for our seven core enterprise IAM pillars.
While this is an individual contributor role with no direct reports, you are a vital member of the IAM Leadership Team (LT). You will orchestrate a broader ecosystem of technical leads and product leaders to ensure that every solution is desirable, feasible, viable, and sustainable. Your mission is to define the technical vision that enables a seamless, "Zero Trust" user experience while protecting the company’s most critical digital assets.
Your primary objective is to architect a unified Identity Fabric that balances the Information Security Strategy, ensures harmony across the IAM ecosystem, and guarantees an optimal end-user experience while protecting the company’s most critical digital assets.
Job Responsibilities
Strategy & Roadmap Definition
Architectural Vision: Provide expert technical knowledge to define the overarching IAM strategy and multi-year technology roadmaps in alignment with the overall Information Security’s vision.
Roadmap Support: Support the Head of IAM and the Leadership Team in transforming complex scientific and business needs into high-value technology solutions.
Trend Integration: Proactively monitor market shifts and technology trends, including AI/ML capabilities, to inform product iterations and maintain a competitive advantage.
Product Leader Support: Provide technical consultancy and architectural oversight to the 7 IAM areas (Enterprise Identity, Access Management, Customer Identity, Data Access Control, Privileged Access Management, External Identity, and Directory Services).
Zero Trust Catalyst: Champion modern principles such as "Never Trust, Always Verify" and "Policy-as-Code," ensuring these are integrated into CI/CD and DevSecOps workflows.
Continuous Platform Evolution: Drive ongoing collaboration with RDT Functions and business stakeholders to ensure the continuous evolution of our IAM platforms, delivering services that meet emerging needs.
Lifecycle Oversight: Actively contribute to the lifecycle management of technological components, from initial ideation and strategic planning to decommissioning.
Operational Integrity: Ensure that solutions integrate seamlessly with existing systems, deliver high performance, and provide an intuitive user experience.
Compliance & Standards: Guarantee that all technical architectures comply with GxP, CSV, and global data privacy regulations like GDPR.
Mentorship: Actively coach and provide technical guidance to specialists and engineers across the IAM organization to foster a strong product culture.
Qualifications
You are a technical visionary with an "Enterprise Mindset" who can break down silos and bring diverse groups together toward a common purpose. You are someone who wants to influence the development of global security standards and thrives in a complex, multi-national environment.
10+ years of successful technical experience supporting Enterprise IAM and IT Security systems in a major global organization.
Industry Context: Experience in the pharmaceutical, biotechnology, or regulated healthcare industry is a significant asset.
Bachelor’s or Advanced degree in Computer Science, Cyber Security, or a related Engineering field or equivalent experience.
Technical Mastery: Deep knowledge in at least three of our core technology pillars or similar platform is required:
Identity Governance & Administration: SailPoint IdentityIQ or IdentityNow / Identity Security Cloud (ISC).
Access Management/Directory Services: Entra ID, Ping Identity, Active Directory, and OIDC/SAML.
Privileged Access Management/Secret Management: CyberArk or HashiCorp Vault.
Data Access Control: Policy-Based Access Control (PBAC).
Customer IAM: SAP CDC/Gigya
Security Standards: Professional certifications (CISSP, CISM, or CISA) are highly desirable.
Skills & Competencies
Advanced Architecture: Understanding of modern software architecture, including microservices, APIs, and cloud platforms (AWS, Azure, GCP).
DevOps & Automation: Experience with CI/CD principles and automation tools such as Ansible and Jenkins.
Influencing: Exceptional communication and negotiation skills with the ability to manage expectations of senior executives and technical engineers alike.
Languages: Excellent verbal and written English is a must.
Who we are
A healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.
Let’s build a healthier future, together.
Roche is an Equal Opportunity Employer.
Skills Required
- 10+ years of technical experience supporting Enterprise IAM and IT Security systems in a major global organization.
- Experience in the pharmaceutical, biotechnology, or regulated healthcare industry.
- Bachelor's or advanced degree in Computer Science, Cyber Security, or related Engineering field, or equivalent experience.
- Deep knowledge in at least three IAM technology pillars: SailPoint IdentityIQ/IdentityNow/Identity Security Cloud, Entra ID/Ping Identity/Active Directory/OIDC/SAML, CyberArk/HashiCorp Vault, PBAC, SAP CDC/Gigya.
- Professional certifications such as CISSP, CISM, or CISA.
- Understanding of modern software architecture including microservices, APIs, and cloud platforms (AWS, Azure, GCP).
- Experience with CI/CD principles and automation tools such as Ansible and Jenkins; integration with DevSecOps workflows.
- Knowledge of compliance and standards including GxP, CSV, and global data privacy regulations (e.g., GDPR).
- Excellent verbal and written English communication skills.
- Ability to coach, mentor, and provide technical guidance to specialists and engineers across the IAM organization.
Roche Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Roche and has not been reviewed or approved by Roche.
-
Retirement Support — U.S. materials describe a 401(k) with both matching and an additional company contribution, supported by formal plan documents and true‑up features. This structure is positioned as a standout element of the total package, particularly at Genentech.
-
Leave & Time Off Breadth — Time‑off provisions include substantial vacation, a year‑end shutdown, and a paid six‑week sabbatical after six years. These elements indicate a recharge‑oriented approach within the U.S. offering.
-
Healthcare Strength — Company materials emphasize comprehensive medical, dental, vision, and mental‑health resources alongside well‑being programs. Benefits pages consistently highlight breadth across core health coverage elements.
Roche Insights
What We Do
Roche is a global pioneer in pharmaceuticals and diagnostics focused on advancing science to improve people’s lives. The combined strengths of pharmaceuticals and diagnostics under one roof have made Roche the leader in personalised healthcare – a strategy that aims to fit the right treatment to each patient in the best way possible. Roche is the world’s largest biotech company, with truly differentiated medicines in oncology, immunology, infectious diseases, ophthalmology and diseases of the central nervous system. Roche is also the world leader in in vitro diagnostics and tissue-based cancer diagnostics, and a frontrunner in diabetes management. Founded in 1896, Roche continues to search for better ways to prevent, diagnose and treat diseases and make a sustainable contribution to society. The company also aims to improve patient access to medical innovations by working with all relevant stakeholders. Thirty medicines developed by Roche are included in the World Health Organization Model Lists of Essential Medicines, among them life-saving antibiotics, antimalarials and cancer medicines. Roche has been recognised as the Group Leader in sustainability within the Pharmaceuticals, Biotechnology & Life Sciences Industry ten years in a row by the Dow Jones Sustainability Indices (DJSI).
