Senior Identity and Access Management (IAM) Engineer
80%-100%, Lugano, permanent
The Swiss National Supercomputing Centre (CSCS) develops and operates cutting-edge, high-performance computing (HPC) systems as an essential service facility for science. The centre enables world-class research through its scientific user lab, which is available to domestic and international researchers in academia, industry, and the business sector. The centre is operated by ETH Zurich and has offices in Lugano (headquarters) and Zurich.
Project background
Robust solutions for identity and access management (IAM) are key to CSCS’s complex research infrastructure and providing reliable, secure supercomputing services. Properly designed IAM processes, services, and federations paired with well-organized assets provide the necessary baseline to build advanced use cases on top of our systems.
To this end, CSCS has an open position at one of our offices in Lugano or Zurich for a Senior IAM Engineer to extend our team.
Initially you will be involved in the following activities:
- Performing proof-of-concept projects for identifying and selecting identity management solutions, implementing them, configuring identity life-cycle (LCM) workflows, and promoting their adoptions by other teams;
- Operating, configuring, and maintaining KeyCloak and WSO2 API Gateway instances;
- Developing solutions to delegate or automatically execute LCM workflows, integrate new systems on IAM services, and continually monitor compliance to policies.
Job description
As a member of the IAM group, you satisfy users’ IAM needs and directly contribute to the development of related solutions. More specifically, you engineer solutions with a strong focus on managing the inherent complexity of identity and access management, which typically limits the flexibility and scalability of IT services in federated and multi-tenant environments.
Your responsibilities:
- Design, configure, and maintain IAM components, including services, templates, workflows, roles, and policies while keeping a strong focus on engineering aspects;
- Collaborate with stakeholders to identify effective solutions to fulfil functional and non-functional requirements, and participate in their implementation projects;
- Provide support, guidance, and advisory to engineering staff and end users who need to integrate their work with IAM services;
- Contribute to the architectural designs, technical assessments, solutions evaluations, and implementation projects, including those involving partner institutions;
- Stay updated with industry trends and emerging technologies in the field.
Your profile
Expected qualifications:
- MSc degree in computer science, engineering, or a related field,
- Experience configuring and administering IAM standards such as OAuth2, SAML, OpenID, and LDAP in a federated context through open source projects,
- Experience with OpenLDAP (preferably in schema design, maintenance, and migration projects), as well as with Identity Management solutions,
- Experience operating and configuring services such as KeyCloak or WSO2 Identity Server in Linux or Kubernetes environments.
Experience with the following is preferred, though there will be opportunities to learn and gain experience on the job:
- Containerization and orchestration technologies;
- Programming and automation;
- Usage of HPC systems.
Your workplace
Your workplace
We offer
In an organization that values autonomy, ownership and continuous learning, the successful candidate will have the opportunity to gain specialized hands-on experience through activities characterized by the challenging aspects typical of the HPC field.
- ETH Zurich is a family-friendly employer with excellent and flexible working conditions.
- You can look forward to an exciting working environment, cultural diversity and attractive offers and benefits.
- We value the diversity of our team and, to further enhance the diversity of our workforce, we particularly encourage women to apply.
We value diversity
Curious? So are we.
Please include the following documents with your application:
- Motivation letter
- CV
- Relevant certificates and diplomas
To further enhance the diversity of our workforce, we particularly encourage women to apply.
We look forward to receiving your online application, including a letter of motivation, CV, diplomas, and employment certificates. Please address your application to Ms Stephanie Frequente, CSCS Human Resources, Via Trevano 131, 6900 Lugano.
Please note that we exclusively accept applications submitted through our online application portal. Applications via email or postal services will not be considered.
Further information about CSCS can be found on our website, www.cscs.ch. Questions regarding the position should be directed to Stefano Schuppli, schuppli@cscs.ch (no applications).
For recruitment services, the GTC of ETH Zurich apply.
About ETH Zürich
Curious? So are we.
Please include the following documents with your application:
- Motivation letter
- CV
- Relevant certificates and diplomas
To further enhance the diversity of our workforce, we particularly encourage women to apply.
We look forward to receiving your online application, including a letter of motivation, CV, diplomas, and employment certificates. Please address your application to Ms Stephanie Frequente, CSCS Human Resources, Via Trevano 131, 6900 Lugano.
Please note that we exclusively accept applications submitted through our online application portal. Applications via email or postal services will not be considered.
Further information about CSCS can be found on our website, www.cscs.ch. Questions regarding the position should be directed to Stefano Schuppli, schuppli@cscs.ch (no applications).
For recruitment services, the GTC of ETH Zurich apply.