Principal Enterprise Identity Engineer - RDT Identity & Access Management
About The Position
The Principal Enterprise Identity Engineer is the technical authority and strategic leader for Roche’s global Enterprise Identity Management (EIM) and Identity Governance and Administration (IGA) landscape. The role defines multi-year identity strategy and advances zero-trust initiatives across a complex global ecosystem, connecting executive business strategy with technical execution. It architects scalable, resilient identity frameworks, mentors senior engineering talent, and leads cross-functional transformations that protect global assets while enabling business operations. The position leads enterprise identity roadmaps and standards, oversees large-scale SailPoint-based solutions, translates security and regulatory requirements into technical strategies, and advances emerging identity technologies. It also serves as a senior escalation point for complex systemic issues and helps build a global Enterprise Identity community. The role must be performed onsite in South San Francisco. Relocation benefits are not available.
Requirements
- 8–10 years of hands-on engineering experience in cybersecurity and identity management, including at least 5 years at an enterprise architecture or principal level.
- 5+ years steering identity strategies in highly regulated, multinational enterprise environments.
- Deep technical expertise in SailPoint IdentityNow/IdentityIQ, including enterprise-scale design, custom development, performance tuning, and global deployment.
- Expert-level proficiency in Java and Python for developing complex connectors, custom rules, and automated workflows.
- Experience architecting integrations across complex multi-cloud environments, including AWS, Azure, and GCP.
- Profound familiarity with CI/CD pipelines, DevOps methodologies, and microservices.
- Ability to communicate deeply technical concepts to non-technical stakeholders and lead distributed global engineering teams autonomously.
- Bachelor’s or advanced degree in Computer Science, Cyber Security, Information Technology, or a related field.
Nice To Haves
- Experience in healthcare, finance, or a similar highly regulated industry is highly preferred.
- Master’s degree preferred.
- CISSP, CISM, or CIAM certification strongly preferred.
- Advanced certifications in AWS, Azure, GCP architecture, or SailPoint highly desirable.
Responsibilities
- Lead the multi-year roadmap and end-to-end technical strategy for enterprise identity, aligning IGA architectures with global security policies and zero-trust frameworks.
- Establish and enforce enterprise-wide architecture patterns, engineering standards, and reusable frameworks across identity, cloud, and infrastructure domains.
- Architect and oversee deployment of next-generation SailPoint-based EIM solutions at massive, distributed scale.
- Translate complex security paradigms and regulatory requirements into actionable, board-level technical strategies.
- Pioneer adoption of emerging identity technologies, including decentralized identity, ML-driven access analytics, and complex microservice/API integrations.
- Mentor senior engineers and serve as the technical cornerstone for the identity organization.
- Lead Tier 4 escalation and root-cause analysis for catastrophic or highly complex systemic issues.
- Mentor engineers and solution architects, conduct architecture and design reviews, and help build a strong global Enterprise Identity community.
- Troubleshoot complex identity issues across ISC configuration and APIs, connectors, applications, directories, and downstream provisioning systems.
- Lead distributed global engineering teams autonomously.
Benefits
- A discretionary annual bonus may be available based on individual and Company performance.
- Benefits are available as detailed at the link provided in the job posting; specific benefits are not listed.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Principal
