1,915,132open jobs
112,493companies
248,355added this week
Browse all
Salary
≈ $48k – $122k per year (Estimated)
Location
In office (Madrid)
Seniority
Principal · 12+ years exp
Employment
Full-Time

Confirmed on the employer's own hiring board on Oct 22, 2026. First seen by Alion on Aug 14, 2026. Roche scores A on the Alion truth index.

Overview
Company
Impact
Profile match
Roche is a Swiss healthcare group founded in Basel in 1896 and is unusual in operating two large divisions of comparable importance: prescription medicines and in vitro diagnostics. The pharmaceutical business is built on oncology, neurology, immunology, ophthalmology and haemophilia, with products such as Ocrevus, Hemlibra, Perjeta and Vabysmo, while the diagnostics division supplies laboratory analysers, molecular tests and sequencing systems to hospitals worldwide. The group owns the American biotechnology company Genentech outright and the Japanese firm Chugai in majority, is controlled by a family shareholder pool, and spends among the largest research budgets in the industry.

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.

The Position

As the Principal Enterprise Identity Engineer, you are the ultimate technical authority and visionary for our global Enterprise Identity Management (EIM) and Identity Governance and Administration (IGA) landscape. Moving beyond individual contribution, you will define the multi-year identity strategy, driving zero-trust initiatives across a highly complex, global ecosystem.

Operating at the highest levels of our technical ladder, you will bridge the gap between executive business strategy and deep technical execution. You will architect resilient, massively scalable identity frameworks, mentor senior engineering talent, and lead cross-functional transformations that protect our most critical global assets while enabling frictionless business operations.

Job Responsibilities

  • Lead the multi-year roadmap and end-to-end technical strategy for enterprise identity, aligning IGA architectures with global security policies and zero-trust frameworks.

  • Establish and enforce enterprise-wide architecture patterns, engineering standards, and reusable frameworks across identity, cloud, and infrastructure domains.

  • Architect and oversee the deployment of next-generation, SailPoint-based EIM solutions that operate flawlessly at a massive, distributed scale.

  • Translate complex security paradigms and regulatory requirements into actionable, board-level technical strategies.

  • Pioneer the adoption of emerging identity technologies, including decentralized identity, advanced ML-driven access analytics, and complex microservice/API integrations.

  • Act as the technical cornerstone for the identity organization, mentoring senior engineers and leading Tier 4 escalation and root-cause analysis for catastrophic or highly complex systemic issues.

Qualifications and Core Expertise

  • Minimum of 12 years of hands-on engineering experience in Cybersecurity and Identity Management, with at least 5 years operating at an enterprise architecture or principal level.

  • 5+ years of experience steering identity strategies in highly regulated, multinational enterprise environments (Healthcare, Finance, or similar industries highly preferred).

  • Deep-tier technical expertise in SailPoint (IdentityNow/IdentityIQ), encompassing enterprise-scale design, custom development, performance tuning, and global deployment.

  • Expert-level proficiency in Java and Python for developing highly complex connectors, custom rules, and automated workflows.

  • Proven track record of architecting integration solutions across complex multi-cloud environments (AWS, Azure, GCP) and profound familiarity with CI/CD pipelines, DevOps methodologies, and microservices.

  • Deep, authoritative understanding of RBAC, PBAC, Segregation of Duties (SoD), and advanced access governance frameworks.

  • Exceptional executive presence with the ability to communicate deeply technical concepts to non-technical C-suite stakeholders and lead distributed global engineering teams autonomously.

Education & Certifications

  • Degree:Bachelor’s or Advanced degree (Master’s preferred) in Computer Science, Cyber Security, Information Technology, or a related field.

  • Required Certifications:CISSP, CISM, or CIAM is strongly preferred for this leadership level.

  • Technical Certifications:Advanced certifications in AWS/Azure/GCP Architecture or SailPoint highly desirable.

Who we are

A healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.

Let’s build a healthier future, together.

Roche is an Equal Opportunity Employer.

Free account
Stop reading job ads. Get the ones that fit.
One free account turns this page into a shortlist built around your stack, your level and your pay.
Match on every job. Stack, seniority, pay and location, scored against your profile.
1,915,132 open roles. Read straight off company career pages, refreshed every day.
Unlimited applications. Every one you send is tracked in one place, on-site or on a company board.
3 tailored CVs a month. Rewritten for the exact job you are applying to. Included free.
Create a free account Continue with Google
Free forever. No card. Under a minute.

Your match

How well do you fit this role?
Two answers are enough for a real match. No account needed.
Check my fit
Answers stay in this browser until you create an account.

Recommended for you based on this role

Industrial Engineering
Similar stack
Same company
Madrid
≈ $51k – $119k per year (Estimated) • In office • Full-Time • 10+ years exp • Barcelona • Milan
Apply
≈ $43k – $84k per year (Estimated) • In office • Full-Time • 5+ years exp • Barcelona
Apply
≈ $44k – $85k per year (Estimated) • In office • Full-Time • 10+ years exp • Spain
Apply
≈ $30k – $71k per year (Estimated) • In office • Full-Time • Barcelona
Apply
≈ $34k – $80k per year (Estimated) • In office • Full-Time • Alcobendas
Apply
$93k – $189k per year • In office • Full-Time • 10+ years exp • Bachelor's Degree • Columbus • Charlotte
DevOps
GCP
AWS
Management
Agile
Scrum
Waterfall
Apply
$71k – $92k per year (gross) • In office • 5+ years exp • Bachelor's Degree • Athenry
Python
Chips/EDA
JMP
Minitab
Life Sciences
Design of Experiments
Apply
Process Manager 1 month ago
≈ $38k – $66k per year (Estimated) • In office • Full-Time • 3+ years exp • Bachelor's Degree • Sant Cugat del Vallès
DevOps
Azure DevOps
Azure
Configuration Management
Management
Jira
MedTech
ISO 13485
IEC 62304
Design Controls
Verification & Validation
Apply
≈ $16k – $36k per year (Estimated) • In office • Full-Time • Singapore
Life Sciences
GMP
Apply
≈ $17k – $37k per year (Estimated) • In office • Full-Time • Madrid
Apply
≈ $29k – $70k per year (Estimated) • In office • Full-Time • Madrid
Apply
≈ $81k – $159k per year (Estimated) • Hybrid • Bachelor's Degree • Madrid
AI/ML
LLM Guardrails
DevOps
GCP
Azure
AWS
Cybersecurity
NIST CSF
Zero Trust
Management
ITIL
Apply
Hybrid • 3+ years exp • Bachelor's Degree • Madrid
Management
Agile
Apply
$27k per year (gross) • In office • Full-Time • 2+ years exp • Madrid
Apply
See all jobs
This is one of many
1,915,132 more open roles from verified company boards, updated every day.