Bei Roche kannst du ganz du selbst sein und wirst für deine einzigartigen Qualitäten geschätzt. Unsere Kultur fördert persönlichen Ausdruck, offenen Dialog und echte Verbindungen. Hier wirst du für das, was du bist, wertgeschätzt, akzeptiert und respektiert. Dies schafft ein Umfeld, in dem du sowohl persönlich als auch beruflich wachsen kannst. Gemeinsam wollen wir Krankheiten vorbeugen, stoppen und heilen und sicherstellen, dass jeder Zugang zur Gesundheitsversorgung hat – heute und in Zukunft. Werde Teil von Roche, wo jede Stimme zählt.
Die Position
PBAC Operations Engineer - RDT Identity& Access Management
Location: Pune
As part of Roche Digital Technology (RDT), our Identity and Access Management (IAM) team protects the organization’s global digital assets by developing and operating sophisticated security platforms. We work at the forefront of identity governance, fine-grained authorization, and hybrid cloud security to support users and business-critical systems in a highly regulated global healthcare ecosystem.
As aPBAC Operations Engineer in the Identity and Access Management (IAM) space, you will be part of a global team responsible for the design, implementation, and lifecycle management of our Policy Based Access Control (PBAC) infrastructure. You will play a critical role in protecting our information and assets by moving beyond traditional access models toward a dynamic, fine-grained authorization framework that supports our global Zero Trust strategy. In this role, you will be the technical owner of the PBAC infrastructure, ensuring it is scalable, resilient, and deeply integrated into the Roche digital ecosystem.
The Opportunity
In this role, you will lead complex PBAC implementations and shape the future of dynamic authorization across our global enterprise. You will:
- Architect and maintain core PBAC components (PDP/PEP) across a hybrid global landscape to ensure high availability,
resilience, and performance.
- Lead the transition from initial use cases to enterprise-wide adoption while defining organization-wide standards for policy-based authorization.
- Act as the primary technical consultant for application and data owners to seamlessly integrate systems via RESTful APIs, SQL/JDBC, and LDAP.
- Drive the shift to Policy as Code (PaC) by designing automated pipelines for versioning, testing, and deploying authorization logic like software.
- Own the tactical lifecycle of the platform, including version upgrades, security patching, continuous performance tuning, and managing external Managed Service Providers (MSPs).
- Streamline onboarding processes for new assets, ensuring strict alignment with global security standards, ITIL change principles, and regulatory requirements such as GDPR.
- Bridge the gap between vendor capabilities and internal business requirements while navigating complex stakeholder networks across global cluster squads.
- Collaborate with product managers and developers to resolve unusually complex problems and create secure, user-friendly authorization flows.
Who you are
We are looking for an expert technical leader who combines deep IAM expertise with strong stakeholder alignment skills. To excel in this role, you bring:
- Experience: 5–9 years of experience in IT/Security, with 4+ years dedicated to IAM and specific expertise in PBAC/ABAC within large enterprise environments.
- Education: A Bachelor's degree in a technical field is required; a Master's degree or Ph.D.
is preferred.
- Technical Mastery: Advanced knowledge of XACML, Policy as Code (PaC), and decentralized policy management alongside standard IAM protocols (SAML, OAuth, OIDC, SSO, and IGA).
- Development& DevOps: Proficiency in Java or Python for custom integrations, paired with hands-on experience using Git and CI/CD pipelines for secure code deployment.
- Architectural Mindset: Strong advocacy for Zero Trust principles, prioritizing configurable off-the-shelf capabilities over custom builds for long-term maintainability.
- Consulting& Analysis: Proven ability to apply systems thinking to complex business problems, conducting root cause analysis, eliciting requirements, and advising senior leadership.
- Communication& Collaboration: Excellent English communication skills to explain complex concepts to non-technical stakeholders, mentor team members, and navigate energetic cross-functional environments.
Call to Action
Ready to bring your unique qualities to Roche and make an impact? Apply now and join us in our mission to shape the future of healthcare.
#RDT2026
Wer wir sind
Eine gesündere Zukunft treibt uns zur Innovation an. Mehr als 100.000 Mitarbeiter weltweit arbeiten gemeinsam daran, wissenschaftliche Fortschritte zu erzielen und sicherzustellen, dass jeder Zugang zur Gesundheitsversorgung hat – heute und für zukünftige Generationen. Durch unser Engagement werden über 26 Millionen Menschen mit unseren Medikamenten behandelt und mehr als 30 Milliarden Tests mit unseren Diagnostik-Produkten durchgeführt. Wir ermutigen uns gegenseitig, neue Möglichkeiten zu erkunden, Kreativität zu fördern und hohe Ziele zu setzen, um lebensverändernde Gesundheitslösungen zu liefern.
Gemeinsam können wir eine gesündere Zukunft gestalten.
Roche ist ein Arbeitgeber, der die Chancengleichheit fördert.
📌 PBAC Operations Engineer - RDT Identity & Access Management (India)
🏢 Roche
📍 India