Senior Identity and Access Management (IAM) Engineer

The Swiss National Supercomputing Centre (CSCS) develops and operates cutting-edge, high-performance computing (HPC) systems as an essential service facility for science. The centre enables world-class research through its scientific user lab, which is available to domestic and international researchers in academia, industry, and the business sector. The centre is operated by ETH Zurich and has offices in Lugano (headquarters) and Zurich.

Robust solutions for identity and access management (IAM) are key to CSCS’s complex research infrastructure and providing reliable, secure supercomputing services. Properly designed IAM processes, services, and federations paired with well-organized assets provide the necessary baseline to build advanced use cases on top of our systems.

To this end, CSCS has an open position at one of our offices in Lugano or Zurich for a Senior IAM Engineer to extend our team.

Initially you will be involved in the following activities:

• Performing proof-of-concept projects for identifying and selecting identity management solutions, implementing them, configuring identity life-cycle (LCM) workflows, and promoting their adoptions by other teams;
• Operating, configuring, and maintaining KeyCloak and WSO2 API Gateway instances;

• Developing solutions to delegate or automatically execute LCM workflows, integrate new systems on IAM services, and continually monitor compliance to policies.

As a member of the IAM group, you satisfy users’ IAM needs and directly contribute to the development of related solutions. More specifically, you engineer solutions with a strong focus on managing the inherent complexity of identity and access management, which typically limits the flexibility and scalability of IT services in federated and multi-tenant environments.

Your responsibilities:

• Design, configure, and maintain IAM components, including services, templates, workflows, roles, and policies while keeping a strong focus on engineering aspects;
• Collaborate with stakeholders to identify effective solutions to fulfil functional and non-functional requirements, and participate in their implementation projects;
• Provide support, guidance, and advisory to engineering staff and end users who need to integrate their work with IAM services;
• Contribute to the architectural designs, technical assessments, solutions evaluations, and implementation projects, including those involving partner institutions;
• Stay updated with industry trends and emerging technologies in the field.

Expected qualifications:

• MSc degree in computer science, engineering, or a related field,
• Experience configuring and administering IAM standards such as OAuth2, SAML, OpenID, and LDAP in a federated context through open source projects,
• Experience with OpenLDAP (preferably in schema design, maintenance, and migration projects), as well as with Identity Management solutions,
• Experience operating and configuring services such as KeyCloak or WSO2 Identity Server in Linux or Kubernetes environments.

Experience with the following is preferred, though there will be opportunities to learn and gain experience on the job:

• Containerization and orchestration technologies;
• Programming and automation;
• Usage of HPC systems.

In an organization that values autonomy, ownership and continuous learning, the successful candidate will have the opportunity to gain specialized hands-on experience through activities characterized by the challenging aspects typical of the HPC field.

• ETH Zurich is a family-friendly employer with excellent and flexible working conditions.
• You can look forward to an exciting working environment, cultural diversity and attractive offers and benefits.
• We value the diversity of our team and, to further enhance the diversity of our workforce, we particularly encourage women to apply.