IAM Engineer

SUMMIT RECRUITMENT AG seeks a Mid-level IAM Engineer in Luzern for on-site work. The role focuses on designing and maintaining identity solutions within a complex enterprise setting.

This position is responsible for the end-to-end management of identity and access management systems. The engineer will design, deploy, and sustain these solutions to ensure secure and efficient access across the organization's infrastructure.

Responsibilities

• Architect and sustain identity frameworks, covering the full identity lifecycle, authentication mechanisms, and authorization structures.
• Administer and tune directory services such as Active Directory, Azure AD, and LDAP.
• Connect identity platforms with cloud environments (Azure, AWS, GCP) and legacy on-premises applications.
• Configure and manage Single Sign-On (SSO), Multi-Factor Authentication (MFA), and federation protocols.
• Implement role-based access control (RBAC) and enforce least-privilege security models.
• Monitor system health, troubleshoot issues, and ensure high availability and performance of IAM tools.
• Partner with security teams to perform access reviews, maintain compliance, and execute identity governance workflows.
• Lead or support projects involving system migrations, upgrades, and automation efforts.
• Document standards, best practices, and operational procedures for identity services.

Requirements

• Demonstrated background in IAM engineering, ideally within large-scale enterprise environments.
• Deep expertise in administering Active Directory and Azure Active Directory.
• Solid understanding of identity federation standards including SAML, OIDC, and OAuth2.
• Proven ability to deploy and manage MFA and SSO solutions.
• Hands-on experience with IAM platforms like SailPoint, Okta, Ping Identity, or CyberArk.
• Proficiency in scripting languages such as PowerShell or Python for task automation.
• Strong grasp of security fundamentals, regulatory compliance, and standards like ISO 27001 and GDPR.

Nice to have

• Experience with Privileged Access Management (PAM) tools.
• Knowledge of integrating IAM with cloud providers (Azure, AWS, GCP).
• Familiarity with Zero Trust security architecture principles.
• Relevant certifications such as Microsoft SC-300, CISSP, or vendor-specific IAM credentials.

About the company

The organization values analytical thinking and proactive problem-solving. They seek individuals who are self-motivated, focused on continuous improvement, and capable of working both independently and as part of a collaborative team. Clear communication skills, both technical and non-technical, are essential for success in this role.

• Emphasis on strong problem-solving and analytical capabilities.
• Expectation of proactive, self-driven individuals focused on improvement.
• Value placed on independent work and effective team collaboration.
• Importance of clear, confident communication across technical and non-technical audiences.