Web Access Management Engineer - RDT Identity & Access Management

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections,  where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come.

Join Roche, where every voice matters. The Position As a Web Access Management Engineer specializing in Authentication, you will be a core member of our Identity and Access Management product team, responsible for designing, building, and maintaining secure and seamless authentication experiences for our enterprise on-prem and SaaS platforms. You will play a crucial role in integrating and implementing various authentication and authorization protocols, ensuring our applications are protected against evolving cyber threats while delivering a frictionless user experience.

The Opportunity Responsibilities Authentication & Authorization Implementation Design, test, and deploy reusable authentication and authorization components across the enterprise while adhering to security best practices and architectural guidelines Implement enterprise IAM solutions and integrate with identity providers (IdPs) using protocols like SAML, OAuth, and OpenID Connect (OIDC) to support Single Sign-On (SSO) Implement and manage secure MFA mechanisms, including exploring and deploying passwordless authentication solutions to enhance user security Develop hands-on experience with token-based authentication (JWT), session management, and secure communication via RESTful APIs and HTTP/HTTPS API Security & Backend Integration Collaborate with backend developers to define and implement robust API security measures, including token validation and authorization mechanisms Ensure secure integration across authentication flows and establish security standards for token handling and authorization frameworks Production Support & Incident Management Apply ITIL principles to troubleshoot authentication issues in production environments and participate in change management processes Work with security teams to mitigate authentication vulnerabilities and perform root-cause analysis on authentication-related incidents Investigate security incidents and perform vulnerability assessments on authentication systems Continuous Learning & Evolution Stay updated on cutting-edge authentication technologies, security threats, and industry best practices to continuously improve security systems Demonstrate a mindset of continuous improvement with a proactive approach to identifying solution-level issues, gaps, or inefficiencies Contribute to minor process improvements within your immediate scope and identify opportunities for technical refinement Stakeholder Collaboration & Communication Work closely with product managers, security engineers, and developers to create secure and user-friendly authentication flows that meet business and technical requirements Identify key business, technical, and security stakeholders for assigned tasks, analyzing their needs and interests regarding security posture and risk Develop and deliver tailored communication for security tasks and incident updates Facilitate meetings and proactively engage with stakeholders to elicit, clarify, and validate security requirements Feature Development & Reliability Develop and maintain reliable and scalable authentication and authorization features to ensure the adoption of security best practices across the organization Contribute to projects by providing well-analyzed requirements and supporting the design of solutions that align with business objectives Translate requirements into strategic plans with appropriate oversight and demonstrate growing autonomy within your domain Who You Are Experience & Education 3-5 years of experience as a Web Developer with a si