At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.The PositionAs a Cybersecurity senior engineer in the Web Access space, you would be part of a multicultural and global team focused on Single Sign On (SSO) / Federation and Multifactor authentication, protecting our information and assets from unauthorized access, security risks and cyber attacks:To provide customers’ single sign-on experience supporting Federation focus on SAML and OAuth protocols standardsTo avoid unauthorized access supporting advanced MultiFactor authenticationTo own the core infrastructure enabling day to day operation, performance, tactical lifecycle management and continuous improvementYour ResponsibilitiesAs part of a global team, own the Authentication infrastructure to enable SSO and MFA across a general, hybrid infrastructure landscape, including on premise servers and containers, as well as SaaS components.Act as consultant for the support and development organizations to promptly respond to customer requests, resolve incidents and implement changes, ensuring a high level of customer engagement and satisfaction. This will be accomplished by combining personal ownership with delegation and documentation to entry support tiersLeverage your knowledge of encryption, digital signatures, and secure token exchangeApply ITIL principles to troubleshoot authentication issues in production environments and participate in change management processes, working with security teams to mitigate authentication vulnerabilitiesStay updated on cutting-edge authentication technologies, security threats, and industry best practices to continuously improve security systemsWork closely with product managers, security engineers, and developers to create secure and user-friendly authentication flows that meet business and technical requirementsDevelop,



and maintain reliable and scalable authentication and authorization features to ensure the adoption of security best practices across the organizationStakeholder ManagementIdentifies a diverse range of security stakeholders across functional areas and effectively manages relationships to build reliance through deep business and technical understanding, acting as a trusted advisorActs as a strategic influencer, defining and driving stakeholder engagement strategies for complex initiatives, facilitating workshops, resolving conflicts, and proactively shaping stakeholder perspectives to align with project goalsImpact/StrategyDemonstrates strong and consistent performance across diverse products, with an impact that typically extends to a specific product, initiative, or clusterTranslates requirements into strategic implementation plans that align with overall business objectives, and takes a proactive role in shaping team processes, often contributing to Communities of Practice (CoPs)ComplexityManages business analysis activities on more complex projects or across multiple products within a domainCapable of handling ambiguous requirements, navigating intricate stakeholder environments, and evaluating solution impacts considering both immediate and longer‑term implications within the domainBusiness/Technical abilityDemonstrates a strong understanding of the business domain, related technologies, and their interdependenciesCan independently apply tools, principles, concepts, and techniques related to requirements, data, usability, and process analysis, effectively managing interconnections to improve overall efficiency and effectivenessEducation / ExperienceYou bring 7+ years of experience working in a major global organization, preferably in a regulated industryYou have a Bachelor’s Degree in computer science, engineering or related discipline or recognition of prior working experienceDemonstrated ability to effectively manage relationships with a diverse range of cross‑functional stakeholders on medium to large‑sized engagements, acting as a trusted advisorProven track record of championing accountability by example,



such as successfully taking on security incident lead and/or security project owner rolesTechnical SkillsDemonstrable experience working with Identity and Access Management (IAM) solutions such as Okta, Entra ID (Azure AD), Ping Identity, Auth0, or similarProven experience with SAML, OAuth 2.0 and OpenID Connect (OIDC) protocolsAble to troubleshoot complex authentication and authorization issues in collaboration with application developers and other technical organizationsReadiness to adapt to new technologies, standards, and evolving security threatsExperience implementing and integrating various MFA methods (e.g., TOTP, FIDO2/WebAuthn, biometric authentication, YubiKey)Strong proficiency in independently applying tools, principles, and concepts related to requirements, data, usability, and process analysis within the security domainAdvanced analytical and logical reasoning skills to identify security patterns, threats, and discrepancies, driving comprehensive root cause analysisAbility to analyze technology fit and propose effective, strategically aligned cybersecurity solutions and controlsAdditional QualificationsEffectively communicates to interact with various teams (developers, stakeholders, users)Proven experience working collaboratively with cross‑functional teams for integration and implementation of global web solutionsDemonstrated ability to mentor colleagues with less experience and provide guidance on cybersecurity best practices and analysis techniquesProactive contribution to organizational development, including identifying process improvements and actively participating in Communities of Practice (CoPs)Strong facilitation, communication, and conflict resolution skills to ensure alignment across multiple product squads and complex stakeholder networksWho we areA healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life‑changing healthcare solutions that make a global impact.Let’s build a healthier future, together.Roche is an Equal Opportunity Employer.
#J-18808-Ljbffr

📌 Web Access Management Engineer - RDT Identity & Access Management (Madrid)
🏢 Roche
📍 Madrid