{"id":3570243,"url":"https://alion.io/job/sonarsource-identity-access-management-engineer","title":"Identity & Access Management Engineer","company":{"id":4925,"name":"SonarSource","domain":"sonarsource.com","url":"https://alion.io/company/sonar","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"A","score":92,"open_postings":106,"ghost_share":0,"stale_share":0.123,"repost_share":0,"time_to_fill_p50_days":88,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Geneva, Switzerland"],"countries":["CH"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":105000,"max_usd":243000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"CyberArk","optional":false},{"name":"Defense in Depth","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"JavaScript","optional":false},{"name":"LDAP","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"Ping Identity","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-31T13:12:57Z","employer_posted_date":"2026-10-31","last_verified_at":"2026-11-03T04:42:15Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Position description\nWe are looking for an experienced Identity & Access Management (IAM) Engineer to design, build, and operate the identity platforms that secure access to our applications, infrastructure, and data. You will own the technical direction of our IAM ecosystem, including authentication, authorization, lifecycle management, and privileged access. You will work with security, IT, engineering, and compliance teams to deliver a secure, scalable, and user-friendly access experience aligned with Zero Trust principles.\nWhat you will do\nDesign, implement, and maintain enterprise IAM solutions, including SSO, MFA, federation, and directory services.\n\nArchitect and manage identity lifecycle processes (joiner/mover/leaver), automating provisioning and deprovisioning across SaaS, cloud, and on-prem systems.\n\nImplement and operate Privileged Access Management (PAM), including vaulting, session management, and just-in-time access.\n\nLead Identity Governance and Administration (IGA) initiatives such as access reviews, certifications, role-based access control (RBAC), and segregation-of-duties controls.\n\nIntegrate applications with the identity platform using SAML, OIDC, OAuth 2.0, SCIM, and LDAP.\n\nDevelop automation and tooling (APIs, scripts, CI/CD pipelines, Infrastructure as Code) to reduce manual identity operations.\n\nSecure cloud identity and access across AWS, Azure, and/or GCP, including IAM policies, workload identity, and service accounts.\n\nDefine and enforce authentication and authorization standards, policies, and best practices.\n\nMonitor identity-related threats and support detection and response for account compromise, credential abuse, and privilege escalation.\n\nExperience and qualifications\n6 to 15 years of experience in IAM, security engineering, or a related field.\n\nHands-on experience with at least one major IAM platform such as Okta, Microsoft Entra ID (Azure AD), Ping Identity, ForgeRock, SailPoint, or CyberArk.\n\nStrong knowledge of identity protocols and standards: SAML 2.0, OAuth 2.0, OpenID Connect, SCIM, LDAP, and Kerberos.\n\nExperience with Active Directory and directory services architecture.\n\nProficiency in at least one scripting or programming language (Python, PowerShell, Go, Java, or JavaScript).\n\nSolid understanding of cloud IAM models (AWS IAM, Azure RBAC, GCP IAM).\n\nExperience with MFA, passwordless, and conditional or risk-based access.\n\nFamiliarity with Zero Trust, least privilege, and defense-in-depth principles.\n\nStrong analytical, problem-solving, and communication skills.","description_format":"text","description_chars":2553,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Software Testing & QA","Developer Tools"],"lifecycle":[{"event":"open","at":"2026-10-31T15:56:28Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":88,"reasons":["conf:3","velocity","win:early","comp:brand"],"computed_at":"2026-11-02T06:13:15Z"},"pay":null,"html_url":"https://alion.io/job/sonarsource-identity-access-management-engineer","json_url":"https://alion.io/job/sonarsource-identity-access-management-engineer.json","meta":{"generated_at":"2026-11-03T05:43:28Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7789,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4925},"rest":"https://alion.io/mcp/rest/get_company?id=4925"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsonarsource-identity-access-management-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsonarsource-identity-access-management-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsonarsource-identity-access-management-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sonarsource-identity-access-management-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsonarsource-identity-access-management-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3570243}},{"tool":"search_jobs","arguments":{"company":"sonarsource.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3570243},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}