Senior System Engineer/Architect (Focus OneIdentity and IAM Overall Architecture) 80-100%

You are the technical heart of our IAM solution and take on the role of Lead Engineer and Architect for our central Identity Governance platform. Together with the Product Owner and Team Coach, you shape the technical future of our IAM landscape and ensure a sustainable, scalable, and secure architecture. You look beyond the horizon (Privileged Access Management, Partner IAM, Customer IAM) and ensure that all components merge into a secure and efficient overall system, consistently focusing on standardization. The Universitätsspital Zürich is one of the largest hospitals in Switzerland. Our over 8,600 employees and around 700 trainees work every day for the well-being of our patients. ### Your tasks • Lead for OneIdentity architecture and engineering: You are responsible for the technical architecture within the OneIdentity suite (Designer, Manager, Web Designer and Object Browser). You implement complex business logics and approval workflows, but always prefer standard functionalities over complex customizing • IAM overall understanding and coordination: You understand the identity flows across all systems. You advise Product Owners as well as specialist departments on the technical implications of requirements and ensure that architectural principles and IAM policies are taken into account in the solutions • Architecture functions (Tech-Lead): You coach the engineers in technical questions, promote knowledge transfer within the team, conduct architecture and code reviews (QS), and evaluate solution variants for their sustainability. Additionally, you are responsible for the architecture documentation and plan the removal of technical legacy burdens • Technical contact person for application integrations: You act as the technical counterpart to the IAM Onboarding team and advise them on connecting complex applications to the IAM system. You define the technical integration paths and ensure that new systems are connected according to the architecture specifications • Roadmap and further development: You define the roadmap for the further development of the OneIdentity platform towards a modern Cloud Identity architecture (Entra ID). You support the Product Owner in the technical assessment and architectural planning of the further development of the OneIdentity platform and derive technical requirements and architectural decisions from it • Support for AD and Entra ID: You possess sound knowledge in the hybrid Microsoft environment and support the team in the AD/Entra ID area in engineering and advise on the technical connection to the IAM • 3rd level Support and DevOps: You solve deep-seated problems (e.g., SQL errors, synchronization conflicts) and optimize processes sustainably in order to continuously increase the efficiency of IAM operations Your profile • Education: Completed studies in computer science, training as a Fachinformatiker or a comparable technical qualification • IAM expertise: Several years of professional experience in the administration and engineering of complex IAM systems and hybrid architectures (AD, Entra ID) • OneIdentity Deep Dive: Sound knowledge of the OneIdentity Manager (or a comparable IGA/IAM tool). You understand the data model and can technically map business logic • Technical overall understanding: Sound knowledge in the Microsoft environment (Active Directory, Entra ID and M365) as well as very good SQL and PowerShell knowledge. You understand technical connections across system boundaries, support Microsoft specialists at eye level, and are able to read, analyze, and adapt scripts and business logics in the OneIdentity environment (e.g., VB.NET/C#) as needed • Methodical leadership: Experience in the methodical leadership of (external) partners or engineers in complex IAM implementations without direct line responsibility • Plus point Infrastructure as Code (IaC): Ideally, you bring experience with IaC concepts (e.g., Git-Pipelines) to automate and professionalize the provision and configuration of the IAM system landscape • Architecture mindset: Sound knowledge in role and rights management as well as Access Governance. You can technically justify technological decisions and represent them to various stakeholders • Languages: Very good German and English skills Our benefits We look forward to your application Daniel Buschor Recruiting About the USZ The Universitätsspital Zürich is one of the largest hospitals in Switzerland. Our over 8,600 employees and around 700 trainees work every day for the well-being of our patients.