IAM Tech Lead (IGA)
International Committee of the Red Cross
- Location:
- Geneva, Switzerland
- Category:
- Professional Staff
Posted Aug 5, 2026Apply by Aug 20, 2026 (6d left)
See your match score & applyThe IAM Tech Lead (IGA) is responsible for the technical design, implementation, and evolution of identity lifecycle processes, including Joiner-Mover-Leaver (JML), supporting core authentication services, federation platforms, and user management functions. The role leads the technical transition from Microsoft Identity Manager (MIM) to a modern enterprise IGA platform and ensures the stability and security of the IAM infrastructure.
Responsibilities
- Maintain and enhance the existing Microsoft Identity Manager (MIM) infrastructure to ensure operational stability until its planned retirement.
- Drive the technical strategy and execution for migrating identity lifecycle and governance workflows from MIM to a modern IGA platform (such as MS Entra ID Governance, SailPoint, or One Identity).
- Design, implement, and continuously improve Joiner-Mover-Leaver (JML) workflows and identity lifecycle processes.
- Define and enforce identity governance controls, entitlement reviews, and segregation of duties aligned with enterprise security and compliance standards.
- Architect and implement integrations between IAM platforms and target systems, including HRIS, directories, cloud applications, and on-premises infrastructure.
- Collaborate with business and technical stakeholders to onboard applications and services to the IGA platform.
- Lead the migration from Active Directory Federation Services (ADFS) to Entra ID and establish standards for application authentication and access management.
- Maintain and leverage Microsoft Entra ID capabilities for identity lifecycle and governance functions.
- Define scalable architectural patterns, promote identity governance best practices, and transfer knowledge to operations and support teams.
- Maintain operational documentation, adapt processes to evolving requirements, and ensure smooth transition of new services into production.
- Ensure the high availability, security, and scalability of identity-related services.
Requirements
- Degree in Information Technology, Computer Science, or equivalent experience.
- Minimum 5 years of hands-on experience in technical implementation and engineering within the IAM domain.
- Experience with modern enterprise IGA platforms such as Entra ID Governance, SailPoint, One Identity, Omada, or equivalent.
- Experience leading or architecting complex Joiner–Mover–Leaver (JML) lifecycle processes in enterprise environments.
- Strong hands-on experience with Microsoft Identity Manager (MIM): management agents, synchronization rules, policies, and custom workflows.
- Experience integrating HRIS source systems (e.g., Workday, SAP SuccessFactors) into IGA platforms.
- Solid understanding of identity federation and authentication protocols (OAuth 2.0, OpenID Connect, SAML, Kerberos).
- Experience with Microsoft Entra ID administration and hybrid identity management.
- Automation experience using scripting and IaC tools (PowerShell, Microsoft Graph API, Terraform, Ansible).
- Familiarity with Zero Trust architecture principles and cloud-first IAM strategies.
- Strong analytical and problem-solving skills, with the ability to think at an architectural level.
- Clear communicator, able to translate complex technical concepts for non-technical stakeholders and cross-functional teams.
- Comfortable prioritising and delivering in an agile, product-oriented team environment.
- Fluent English (written and spoken); working knowledge of French is a plus.
Skills
- Identity and Access Management
- IGA Platform Implementation
- Entra ID Governance
- SailPoint
- One Identity
- Omada
- Joiner-Mover-Leaver Lifecycle
- Microsoft Identity Manager
- MIM Management Agents
- MIM Synchronization Rules
- MIM Policies
- MIM Custom Workflows
- HRIS Management
- Workday Integration
- SAP SuccessFactors Integration
- Identity Federation
- OAuth 2.0
- OpenID Connect
- SAML 2.0
- Kerberos
- Microsoft Entra ID Administration
- Hybrid Identity Management
- PowerShell Scripting
- Microsoft Graph
- Terraform
- Ansible
- Zero Trust principles
- Cloud IAM Strategies
- Agile Methodologies
Languages
English, French